CVE-2026-48539

Name of the Vulnerable Software and Affected Versions GFI Archiver versions prior to 15.13

Description A stored cross-site scripting issue exists in the MailInsights scheduled report configuration. Authenticated attackers can inject arbitrary HTML or web scripts through the report name parameter at the '/Archiver/MailInsights.aspx' endpoint. The payload is processed by the ReportScheduling.btnSaveReport Click() function without proper output encoding and is executed in the browser of the user who created the report when they view the MailInsights page.

Recommendations Update GFI Archiver to version 15.13 or later.