ZDI-26-075 HIGH 7.3 Published Feb 12, 2026

GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability

GFI

GFI Archiver contains an authentication bypass vulnerability (CVE-2026-2038) that allows remote attackers to gain unauthorized access without credentials, rated as HIGH severity with a CVSS score of 7.3. An attacker can exploit this flaw to access the application and potentially compromise archived data or the system itself. Security teams should immediately prioritize patching GFI Archiver installations and consider implementing network-level access controls to restrict access to the application until updates are deployed.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy