PT-2026-7950

CVE-2026-2039

·

Published

2026-02-12

·

Updated

2026-02-21

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions GFI Archiver (affected versions not specified)
Description A flaw exists in the configuration of the MArc.Store.Remoting.exe process, listening on port 8018, due to a lack of authorization before granting access to functionality. This allows remote attackers to bypass authentication on affected systems. Exploitation of this issue, potentially in combination with other flaws, could lead to code execution with SYSTEM privileges.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ZDI-26-077
Found an issue in the description? Have something to add? Feel free to write us 👾