CVE-2026-112333— GFI Archiver < 15.14 Stored XSS via MailInsights.aspx
Quick assessment
Affected
GFI Software GFI Archiver
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GFI Archiver 15.14 之前的版本在 MailInsights 定时报告配置中存在存储型跨站脚本（XSS）漏洞。该漏洞允许已认证的攻击者通过向 发送的“报告名称”参数注入任意 Web 脚本或 HTML 代码。注入的载荷会被 方法存储，且未进行输出编码；当创建该定时报告的用户后续查看 MailInsights 页面时，该载荷将在其浏览器中执行。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| GFI Software | GFI Archiver | < 15.14 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112333
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GFI Archiver < 15.14 Stored XSS via MailInsights.aspx
Source: CVE Program / CVE List V5
Vulnerability Description
GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsights.aspx. The injected payload is stored by ReportScheduling.btnSaveReport_Click() without output encoding and is executed in the browser of the user who created the scheduled report when they subsequently view the MailInsights page.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| GFI Software | GFI Archiver | 0 ~ 15.14 | - |
|
II. Public POCs for CVE-2026-112333
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112333
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-112333 (1)
Vendor Pages for CVE-2026-112333 (1)
IV. Related Vulnerabilities
Same product: GFI Archiver
-
CVE-2026-48539
GFI Archiver < 15.14 Stored XSS via MailInsights.aspx -
CVE-2026-48538
GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ash -
CVE-2026-48537
GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWiza -
CVE-2026-48536
GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.as -
CVE-2026-48535
GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.a
Same vendor: GFI Software
-
CVE-2026-74237
GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Too -
CVE-2026-74236
GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnos -
CVE-2026-74235
GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configu -
CVE-2026-48539
GFI Archiver < 15.14 Stored XSS via MailInsights.aspx -
CVE-2026-48538
GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ash
Same weakness: CWE-79
-
CVE-2026-115897
Serialize JavaScript: Cross-site scripting (XSS) via unescap -
CVE-2026-87901
注册模块不当清理导致反射型跨站脚本漏洞 -
CVE-2026-102786
Joomla Extension - phoca.cz - Authenticated stored cross-sit -
CVE-2026-55486
Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — C -
CVE-2026-115457
baserCMS: Unauthenticated Stored XSS via Shortcode Expansion
V. Comments for CVE-2026-112333
No comments yet