CVE-2026-2038: GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability
GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the configuration of the MArc.Core.Remoting.exe process, which listens on port 8017. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of SYSTEM. Was ZDI-CAN-27934.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2038?
CVE-2026-2038 is classified as a high severity vulnerability due to the potential for remote authentication bypass.
How do I fix CVE-2026-2038?
To fix CVE-2026-2038, ensure that you update your GFI Archiver software to the latest version that contains the security patch.
Who is affected by CVE-2026-2038?
CVE-2026-2038 affects installations of GFI Archiver that have not implemented security updates addressing this vulnerability.
What type of vulnerability is CVE-2026-2038?
CVE-2026-2038 is an authentication bypass vulnerability which allows unauthorized access to affected systems.
Can CVE-2026-2038 be exploited remotely?
Yes, CVE-2026-2038 can be exploited remotely by attackers to bypass authentication on the affected installations.