CVE-2026-2036: GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability
GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.
The specific flaw exists within the configuration of the MArc.Store.Remoting.exe process. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-27936.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2036?
CVE-2026-2036 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2026-2036?
To fix CVE-2026-2036, update your GFI Archiver software to the latest version provided by GFI.
What type of attacks can occur due to CVE-2026-2036?
CVE-2026-2036 allows remote attackers to execute arbitrary code on vulnerable systems.
Which versions of GFI Archiver are affected by CVE-2026-2036?
CVE-2026-2036 affects GFI Archiver version 15.10 and potentially earlier versions.
What should I do if I cannot update GFI Archiver due to compatibility issues with CVE-2026-2036?
If you cannot update GFI Archiver, consider implementing firewall rules to limit access and monitor for any suspicious activities.