kerio control vulnerabilities and fixes

Recent CVEs affecting kerio control, with upgrade or downgrade steps. 4 tracked.

Also searched as: keriocontrol.

kerio control has 4 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-07-02. Highest priority: CVE-2024-52875 (score 60/100).

• CVE-2025-34071 CRITICAL 9.8 DOWNGRADE A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with administrative access t
• CVE-2025-34070 CRITICAL 9.8 DOWNGRADE A missing authentication vulnerability in the GFIAgent component of GFI Kerio Control 9.4.5 allows unauthentic
• CVE-2025-34069 CRITICAL 9.8 DOWNGRADE An authentication bypass vulnerability exists in GFI Kerio Control 9.4.5 due to insecure default proxy configu
• CVE-2024-52875 HIGH 8.8 UPGRADE An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5

FAQ

How do I fix kerio control vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is kerio control being exploited right now?

None of the tracked kerio control CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which kerio control CVE should I patch first?

CVE-2024-52875 currently ranks highest (60/100): An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5.

RSS feed for kerio control · ← Back to latest CVEs