GFI USA vulnerabilities
We track 2 vulnerabilities in GFI USA products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest GFI USA vulnerabilities
- 7.8 High severity
GFI KerioConnect: Incorrect Default Permissions
GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group.
- 8.2 High severity
GFI KerioConnect: Improper Neutralization of Input During Web Page Generation
GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScript in a victim's authenticated Webmail session by uploading a crafted SVG email at