CVE-2026-2038
Received Received - Intake

Authentication Bypass in GFI Archiver MArc.Core Enables Remote Access

Publication date: 2026-02-20

Last updated on: 2026-02-24

Assigner: Zero Day Initiative

Description
GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the MArc.Core.Remoting.exe process, which listens on port 8017. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of SYSTEM. Was ZDI-CAN-27934.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-20
Last Modified
2026-02-24
Generated
2026-07-06
AI Q&A
2026-02-21
EPSS Evaluated
2026-07-05
NVD
CVE-2026-2038
EUVD
EUVD-2026-7775

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
gfi archiver 15.10

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in GFI Archiver's MArc.Core.Remoting.exe process, which listens on port 8017. It allows remote attackers to bypass authentication because the process lacks proper authorization checks before granting access to its functionality.

As a result, an attacker can access the system without needing to authenticate, potentially leveraging this flaw along with other vulnerabilities to execute code with SYSTEM-level privileges.

Impact Analysis

This vulnerability can have serious impacts because it allows remote attackers to bypass authentication and gain unauthorized access to the affected system.

An attacker exploiting this flaw could execute code with SYSTEM privileges, which means they could take full control of the system, potentially leading to data theft, data loss, or disruption of services.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-2038. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart