<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: archiver</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-2039: GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-2039.html</link><guid>https://patchthecve.com/cve/CVE-2026-2039.html</guid><pubDate>Wed, 17 Jun 2026 10:30:10 +0000</pubDate><description>CRITICAL 9.8: GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the configu</description></item><item><title>CVE-2026-2038: GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-2038.html</link><guid>https://patchthecve.com/cve/CVE-2026-2038.html</guid><pubDate>Wed, 17 Jun 2026 10:30:10 +0000</pubDate><description>CRITICAL 9.8: GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the configur</description></item><item><title>CVE-2026-2037: GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-2037.html</link><guid>https://patchthecve.com/cve/CVE-2026-2037.html</guid><pubDate>Wed, 17 Jun 2026 10:30:10 +0000</pubDate><description>HIGH 8.8: GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Although authentication is required to exploit this vulnerability, the existing authentication</description></item><item><title>CVE-2026-2036: GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-2036.html</link><guid>https://patchthecve.com/cve/CVE-2026-2036.html</guid><pubDate>Wed, 17 Jun 2026 10:30:10 +0000</pubDate><description>HIGH 8.8: GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Although authentication is required to exploit this vulnerability, the existing authenticatio</description></item><item><title>CVE-2024-11949: GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-11949.html</link><guid>https://patchthecve.com/cve/CVE-2024-11949.html</guid><pubDate>Wed, 17 Jun 2026 06:58:45 +0000</pubDate><description>HIGH 8.8: GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is required to exploit this vulnerability.

The specific flaw exists within</description></item><item><title>CVE-2024-11948: GFI Archiver Telerik Web UI Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-11948.html</link><guid>https://patchthecve.com/cve/CVE-2024-11948.html</guid><pubDate>Wed, 17 Jun 2026 06:58:45 +0000</pubDate><description>CRITICAL 9.8: GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the product installer. The i</description></item><item><title>CVE-2024-11947: GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-11947.html</link><guid>https://patchthecve.com/cve/CVE-2024-11947.html</guid><pubDate>Wed, 17 Jun 2026 06:58:45 +0000</pubDate><description>HIGH 8.8: GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is required to exploit this vulnerability.

The specific flaw exists within </description></item><item><title>CVE-2024-0406: A flaw was discovered in the mholt/archiver package</title><link>https://patchthecve.com/cve/CVE-2024-0406.html</link><guid>https://patchthecve.com/cve/CVE-2024-0406.html</guid><pubDate>Wed, 17 Jun 2026 06:53:25 +0000</pubDate><description>MEDIUM 6.1: A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user&#x27;s or application&#x27;s privileges u</description></item></channel></rss>