PT-2026-7949 · Gfi · Gfi Archiver

Published 2026-02-12 · Updated 2026-02-21 · CVE-2026-2038

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GFI Archiver (affected versions not specified)

Description An authentication bypass issue exists in GFI Archiver’s MArc.Core component due to missing authorization checks. This allows unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-2038

ZDI-26-075

Affected Products

Gfi Archiver

References · 6

• https://osv.dev/vulnerability/CVE-2026-2038 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2038 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-075 · Security Note
• https://t.me/CVEtracker/45316 · Telegram Post
• https://twitter.com/CVEnew/status/2024988735507763538 · Twitter Post
• https://twitter.com/vuldb/status/2022209924953198797 · Twitter Post