ZDI-26-077 HIGH 7.3 Published Feb 12, 2026

GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability

GFI

GFI Archiver contains an authentication bypass vulnerability (CVE-2026-2039) that allows remote attackers to gain unauthorized access without valid credentials. An attacker could exploit this flaw to access sensitive archived data and potentially compromise the integrity or availability of the system. Security teams should immediately patch GFI Archiver and review access logs for suspicious activity, while implementing network-level controls to restrict access to the application until updates are deployed.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy