PatchTheCVEarchiver vulnerabilities and fixes
Recent CVEs affecting archiver, with upgrade or downgrade steps. 8 tracked.
archiver has 8 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-02-20. Highest priority: CVE-2024-11948 (score 58/100).
- CVE-2026-2039 CRITICAL 9.8 DOWNGRADE GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability
- CVE-2026-2038 CRITICAL 9.8 DOWNGRADE GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability
- CVE-2026-2037 HIGH 8.8 DOWNGRADE GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2026-2036 HIGH 8.8 DOWNGRADE GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2024-11949 HIGH 8.8 UPGRADE GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2024-11948 CRITICAL 9.8 UPGRADE GFI Archiver Telerik Web UI Remote Code Execution Vulnerability
- CVE-2024-11947 HIGH 8.8 UPGRADE GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2024-0406 MEDIUM 6.1 UPGRADE DOWNGRADE A flaw was discovered in the mholt/archiver package
FAQ
How do I fix archiver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is archiver being exploited right now?
None of the tracked archiver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which archiver CVE should I patch first?
CVE-2024-11948 currently ranks highest (58/100): GFI Archiver Telerik Web UI Remote Code Execution Vulnerability.