CVE-2025-34489

Name of the Vulnerable Software and Affected Versions GFI MailEssentials versions prior to 21.8

Description A local privilege escalation issue exists, allowing a local attacker to escalate to NT Authority/SYSTEM by sending a crafted serialized payload to a .NET Remoting Service.

Recommendations For GFI MailEssentials versions prior to 21.8, update to version 21.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the .NET Remoting Service to minimize the risk of exploitation.