GFI USA vendor intelligence
GFI USA Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting GFI USA products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 3
- Known exploited vulnerabilities affecting GFI USA products
- In CISA KEV
- 0
- Records also listed in the official catalog
- Beyond CISA KEV
- 3
- Additional exploited vulnerabilities absent from CISA KEV
- Sensor Observed
- 0
- GFI USA KEVs with sensor-observed exploitation activity
The catalog gap matters for GFI USA exposure
All three exploited GFI USA vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss 100% of this vendor portfolio.
- 0%
- Covered by CISA
- 100%
- Beyond CISA
- 1
- Product families
Attested GFI USA vulnerabilities
3 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2026-112357
GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation |
GFI KerioConnect | High | Beyond CISA | 28 Oct 2026 |
|
CVE-2026-112356
GFI KerioConnect < 10.0.9p2 XSS via Link Auto-Formatter |
GFI KerioConnect | High | Beyond CISA | 28 Oct 2026 |
|
CVE-2026-112353
GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment |
GFI KerioConnect | High | Beyond CISA | 27 Oct 2026 |
No GFI USA vulnerabilities match this search or filter.
Showing 3 of 3 on this page (3 GFI USA known exploited vulnerabilities).
Recurring weakness patterns
Neutralization, neutralization, and incorrect default permissions account for five mapped occurrences across this GFI USA KEV portfolio.