CVE Feed

    Dashboard / CVE / CVE-2026-112357

    CVE-2026-112357

    GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can replace the searchd.exe service binary used by the bundled KOFFIndexingService, which runs as LocalSystem, to execute arbitrary code with NT AUTHORITY\SYSTEM privileges upon the next service start or reboot.

    Published:Oct 28, 2026
    Last Modified:Oct 28, 2026
    EPS:Oct 28, 2026
    EPSS Score:
    CVSS Score:7.8

    Affected Products

    Vendor
    Gfi
    Product
    Kerio Connect

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Related CVEs

    CVE-2026-112356 (CVSS 5.1) — GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vulnerability in the We…
    CVE-2026-112353 (CVSS 6.2) — GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in…
    CVE-2025-2977 (CVSS 5.1) — A vulnerability was found in GFI KerioConnect 10.0.6. It has been declared as problematic. Affected by this vu…
    CVE-2025-2976 (CVSS 5.1) — A vulnerability was found in GFI KerioConnect 10.0.6. It has been classified as problematic. Affected is an un…
    CVE-2025-2975 (CVSS 5.1) — A vulnerability was found in GFI KerioConnect 10.0.6 and classified as problematic. This issue affects some un…
    CVE-2023-25267 (CVSS 8.8) — An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Ov…
    CVE-2017-7440 (CVSS 6.5) — Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 thro…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High