ZDI-26-075
HIGH 7.3
Published
Feb 12, 2026
GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability
GFI
GFI Archiver contains an authentication bypass vulnerability (CVE-2026-2038) that allows remote attackers to gain unauthorized access without credentials, rated as HIGH severity with a CVSS score of 7.3. An attacker can exploit this flaw to access the application and potentially compromise archived data or the system itself. Security teams should immediately prioritize patching GFI Archiver installations and consider implementing network-level access controls to restrict access to the application until updates are deployed.