Local Privilege Escalation Vulnerability in GFI KerioConnect Outlook Connector
CVE-2026-112357

8.5HIGH

Key Information:

Vendor

Gfi Usa, Llc

Status
Gfi Kerioconnect
Vendor
CVE Published:
28 October 2026

What is CVE-2026-112357?

GFI KerioConnect's Outlook Connector (Offline Edition) features a local privilege escalation vulnerability due to insufficient permissions in the installer. This flaw allows a non-administrative local attacker to alter the service binary for 'searchd.exe', which is utilized by the KOFFIndexingService running under the LocalSystem account. By exploiting this weakness, the attacker is able to execute arbitrary code with elevated privileges upon the next service restart or system reboot, potentially compromising system integrity.

Affected Version(s)

GFI KerioConnect 0 < 10.0.9p2

References

https://gfi.ai/resource/kerioconnect-product-releases/
release-notespatch
https://www.vulncheck.com/advisories/gfi-kerioconnect-kof...
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.