Advisories · Technology

GFI USA, LLC GFI KerioConnect.

Every CVE that names GFI USA, LLC GFI KerioConnect among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112357 CVE record

CVSS 8.5 High

GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation
- GFI USA, LLC GFI KerioConnect
- Broken access control
Not analysed yet 28 Oct 2026
CVE-2026-112356 CVE record

CVSS 5.1 Medium

GFI KerioConnect < 10.0.9p2 XSS via Link Auto-Formatter
- GFI USA, LLC GFI KerioConnect
- Cross-site scripting (XSS)
Not analysed yet 28 Oct 2026
CVE-2026-112353 CVE record

CVSS 6.2 Medium

GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment
- GFI USA, LLC GFI KerioConnect
- Cross-site scripting (XSS)
Not analysed yet 27 Oct 2026