What is CVE-2026-48531?
CVE-2026-48531 is a stored cross-site scripting vulnerability in the Retention Policy configuration of GFI Archiver versions before 15.13. It allows authenticated attackers to inject arbitrary web script via the 'policy name' parameter in /Archiver/RetentionPolicyWizard.aspx. Upgrading to version 15.13 or later is recommended.
Azərbaycanca: CVE-2026-48531, GFI Archiver-in 15.13 versiyasından əvvəlki versiyalarında Retention Policy konfiqurasiyasında aşkarlanmış stored XSS zəifliyidir. Bu boşluq autentifikasiya olunmuş hücumçulara 'policy name' parametri vasitəsilə ixtiyari veb skript yeritməyə imkan verir. GFI Archiver-i 15.13 və ya daha yuxarı versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-79; shared vendor: GFI
FAQ2
Which product is affected by CVE-2026-48531?
CVE-2026-48531 is a stored XSS vulnerability affecting GFI Archiver versions before 15.13.
How can this vulnerability be mitigated?
It is recommended to upgrade GFI Archiver to version 15.13 or later.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.