kerio_control vulnerabilities
CVEs whose affected-version data names the kerio_control package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-34071Critical· 9.4PoCGFI Kerio Control Unsigned System Image Upload Root Code Execution
A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with administrative access to upload and execute arbitrary code through the firmware upgrade feature. The system upgrade mechanism accepts unsigned .img fi…
▾ AbyssalGFI Software · Kerio ControlEPSS 0.81%via CVEORG
CVE-2025-34070Critical· 10.0PoCGFI Kerio Control GFIAgent Missing Authentication on Administrative Interfaces
A missing authentication vulnerability in the GFIAgent component of GFI Kerio Control 9.4.5 allows unauthenticated remote attackers to perform privileged operations. The GFIAgent service, responsible for integration with GFI AppManager, …
▾ AbyssalGFI Software · Kerio ControlEPSS 0.76%via CVEORG