CVE-2026-2039: GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability
GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the configuration of the MArc.Store.Remoting.exe process, which listens on port 8018. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of SYSTEM. Was ZDI-CAN-28597.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2039?
CVE-2026-2039 is classified as a critical vulnerability due to its potential to allow remote attackers to bypass authentication.
How do I fix CVE-2026-2039?
To address CVE-2026-2039, apply the latest security updates provided for GFI Archiver that contain a patch for this vulnerability.
What systems are affected by CVE-2026-2039?
CVE-2026-2039 affects installations of GFI Archiver that have not been updated to the latest version.
Can CVE-2026-2039 lead to data breaches?
Yes, CVE-2026-2039 can lead to data breaches as it allows unauthorized access to sensitive information due to authentication bypass.
How can I know if I'm vulnerable to CVE-2026-2039?
To determine if you are vulnerable to CVE-2026-2039, check if your GFI Archiver installation is outdated and not patched against this vulnerability.