# GFI vulnerabilities Source: https://junglewise.ai/threats/vendors/gfi Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/gfi.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 12 vulnerabilities in GFI: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-112357, was published on 28 October 2026. 4 vulnerabilities in the last four weeks, up from none in the four before. 3 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 4 - Last 90 days: 7 - All time: 12 (0 critical, 0 exploited in the wild) ## About GFI GFI is a software vendor that develops network security, IT management, and backup solutions. ## Latest GFI vulnerabilities - [CVE-2026-112357: GFI KerioConnect Outlook Connector privilege escalation via installer permissions](https://junglewise.ai/threats/cve-2026-112357-gfi-kerioconnect-kerio-connect-outlook-connector-offline-edition) (high, CVSS 7.8, published 28 Oct 2026) - [CVE-2026-112356: GFI KerioConnect Webmail cross-site scripting via link auto-formatter](https://junglewise.ai/threats/cve-2026-112356-gfi-kerioconnect-kerio-connect-before-10-0-9-patch-2-contains-a) (medium, CVSS 6.1, published 28 Oct 2026) - [CVE-2026-112353: GFI KerioConnect stored XSS in Webmail via SVG attachment](https://junglewise.ai/threats/cve-2026-112353-gfi-kerioconnect-kerio-connect-before-10-0-8-patch-2-contains-a) (high, CVSS 8.2, published 27 Oct 2026) - [CVE-2026-112333: GFI Archiver stored cross-site scripting in MailInsights](https://junglewise.ai/threats/cve-2026-112333-gfi-archiver-before-15-14-contains-a-stored-cross-site-scripting) (medium, CVSS 5.4, published 23 Oct 2026) - [CVE-2026-74237: GFI Exinda AI and ClearView argument injection in Tools Iperf Client](https://junglewise.ai/threats/cve-2026-74237-gfi-exinda-ai-and-clearview-argument-injection-in-tools-iperf) (medium, CVSS 6.5, published 4 Sep 2026) - [CVE-2026-74236: GFI Exinda AI and ClearView path traversal in diagnostic file deletion](https://junglewise.ai/threats/cve-2026-74236-gfi-exinda-ai-and-clearview-path-traversal-in-diagnostic-file) (medium, CVSS 6.5, published 4 Sep 2026) - [CVE-2026-74235: GFI Exinda AI and ClearView path traversal in configuration download handler](https://junglewise.ai/threats/cve-2026-74235-gfi-exinda-ai-and-clearview-path-traversal-in-configuration) (medium, CVSS 4.9, published 4 Sep 2026) - [CVE-2026-23758: GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the ticket subject field that…](https://junglewise.ai/threats/cve-2026-23758-gfi-helpdesk-before-4-99-9-contains-a-stored-cross-site-scripting) (medium, CVSS 5.4, published 20 Apr 2026) - [CVE-2026-23757: GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title…](https://junglewise.ai/threats/cve-2026-23757-gfi-helpdesk-before-4-99-10-contains-a-stored-cross-site) (medium, CVSS 5.4, published 20 Apr 2026) - [CVE-2026-23756: GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the…](https://junglewise.ai/threats/cve-2026-23756-gfi-helpdesk-before-4-99-9-contains-a-stored-cross-site-scripting) (medium, CVSS 5.4, published 20 Apr 2026) - [CVE-2026-23753: GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the language management…](https://junglewise.ai/threats/cve-2026-23753-gfi-helpdesk-before-4-99-9-contains-a-stored-cross-site-scripting) (medium, CVSS 4.8, published 20 Apr 2026) - [CVE-2026-23752: GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the template group creation and…](https://junglewise.ai/threats/cve-2026-23752-gfi-helpdesk-before-4-99-9-contains-a-stored-cross-site-scripting) (medium, CVSS 4.8, published 20 Apr 2026) ## Most severe GFI vulnerabilities - [CVE-2026-112353: GFI KerioConnect stored XSS in Webmail via SVG attachment](https://junglewise.ai/threats/cve-2026-112353-gfi-kerioconnect-kerio-connect-before-10-0-8-patch-2-contains-a) (high, CVSS 8.2, published 27 Oct 2026) - [CVE-2026-112357: GFI KerioConnect Outlook Connector privilege escalation via installer permissions](https://junglewise.ai/threats/cve-2026-112357-gfi-kerioconnect-kerio-connect-outlook-connector-offline-edition) (high, CVSS 7.8, published 28 Oct 2026) - [CVE-2026-74236: GFI Exinda AI and ClearView path traversal in diagnostic file deletion](https://junglewise.ai/threats/cve-2026-74236-gfi-exinda-ai-and-clearview-path-traversal-in-diagnostic-file) (medium, CVSS 6.5, published 4 Sep 2026) - [CVE-2026-74237: GFI Exinda AI and ClearView argument injection in Tools Iperf Client](https://junglewise.ai/threats/cve-2026-74237-gfi-exinda-ai-and-clearview-argument-injection-in-tools-iperf) (medium, CVSS 6.5, published 4 Sep 2026) - [CVE-2026-112356: GFI KerioConnect Webmail cross-site scripting via link auto-formatter](https://junglewise.ai/threats/cve-2026-112356-gfi-kerioconnect-kerio-connect-before-10-0-9-patch-2-contains-a) (medium, CVSS 6.1, published 28 Oct 2026) - [CVE-2026-23758: GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the ticket subject field that…](https://junglewise.ai/threats/cve-2026-23758-gfi-helpdesk-before-4-99-9-contains-a-stored-cross-site-scripting) (medium, CVSS 5.4, published 20 Apr 2026) - [CVE-2026-23757: GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title…](https://junglewise.ai/threats/cve-2026-23757-gfi-helpdesk-before-4-99-10-contains-a-stored-cross-site) (medium, CVSS 5.4, published 20 Apr 2026) - [CVE-2026-23756: GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the…](https://junglewise.ai/threats/cve-2026-23756-gfi-helpdesk-before-4-99-9-contains-a-stored-cross-site-scripting) (medium, CVSS 5.4, published 20 Apr 2026) - [CVE-2026-112333: GFI Archiver stored cross-site scripting in MailInsights](https://junglewise.ai/threats/cve-2026-112333-gfi-archiver-before-15-14-contains-a-stored-cross-site-scripting) (medium, CVSS 5.4, published 23 Oct 2026) - [CVE-2026-74235: GFI Exinda AI and ClearView path traversal in configuration download handler](https://junglewise.ai/threats/cve-2026-74235-gfi-exinda-ai-and-clearview-path-traversal-in-configuration) (medium, CVSS 4.9, published 4 Sep 2026) ## Vulnerabilities per week 4 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 3 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 1 | 0 | 0 | | 26 Oct 2026 | 3 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## GFI technologies - [GFI Helpdesk](https://junglewise.ai/threats/technologies/gfi-helpdesk): 5 vulnerabilities - [GFI ClearView](https://junglewise.ai/threats/technologies/clearview): 3 vulnerabilities - [GFI Exinda AI](https://junglewise.ai/threats/technologies/exinda-ai): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "GFI vulnerabilities", https://junglewise.ai/threats/vendors/gfi, 9 November 2026.