VYPR

KerioConnect Outlook Connector Offline Edition

by Gfi

CVEs (1)

  • CVE-2026-112357HigOct 28, 2026
    risk 0.51cvss 7.8epss —

    GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local…