cve/2025/CVE-2025-34491.md
2025-09-29 21:09:30 +02:00

772 B

CVE-2025-34491

Description

GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attacker can execute arbitrary code by sending crafted serialized .NET when joining to a Multi-Server setup.

POC

Reference

Github

No PoCs found on GitHub currently.