ZDI-26-077
HIGH 7.3
Published
Feb 12, 2026
GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability
GFI
GFI Archiver contains an authentication bypass vulnerability (CVE-2026-2039) that allows remote attackers to gain unauthorized access without valid credentials. An attacker could exploit this flaw to access sensitive archived data and potentially compromise the integrity or availability of the system. Security teams should immediately patch GFI Archiver and review access logs for suspicious activity, while implementing network-level controls to restrict access to the application until updates are deployed.