Login Request a demo
KC
Product
Kerio Control
by Gfi · last CVE Jul 2, 2025
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 3High 1Medium 1Low 0
Severity
All severities5Critical3High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kerio Control to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-34071
9.8
1%
Jul 2
A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with administrative access to upload and execute arbitrary code through the firmware upgrade…
Affected: 9.4.5
CVE-2025-34070
9.8
1%
Jul 2
A missing authentication vulnerability in the GFIAgent component of GFI Kerio Control 9.4.5 allows unauthenticated remote attackers to perform privileged operations
Affected: 9.4.5
CVE-2025-34069
9.8
1%
Jul 2
An authentication bypass vulnerability exists in GFI Kerio Control 9.4.5 due to insecure default proxy configuration and weak access control in the GFIAgent service
Affected: 9.4.5
CVE-2024-52875
8.8
30%
Jan 31
An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5
Affected: 9.2.5 through 9.4.5
CVE-2019-16414
6.1
2%
Sep 30
A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's cleartext credentials to an attacker via a…
Affected: 9.3.0
Showing 5