CVE-2025-34491 — GFI MailEssentials < 21.8 MultiNode Insecure Deserialization
GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attacker can execute arbitrary code by sending crafted seriali…
Published: 2025-04-28 · CVSS: 8.8 · CVSS 3.1
GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attacker can execute arbitrary code by sending crafted serialized .NET when joining to a Multi-Server setup.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7