What’s new in GFI HelpDesk
Version 4.99.10
Release date: 24 March 2026
Security fixes
Addressed the following: CVE-2026-23757
The above CVEs were identified and responsibly disclosed by external security researcher Alex Williams from Pellera Technologies.
All customers are strongly advised to upgrade to GFI HelpDesk 4.99.9 to benefit from these security fixes. Download the new version here.
Version 4.99.9
Release date: 10 March 2026
This release addresses several stored cross‑site scripting (XSS) vulnerabilities.
Security fixes
Resolved multiple stored XSS issues related to user‑supplied fields in template groups, languages, step configuration and ticket subjects, ensuring values are properly validated and encoded before display.
Addressed the following CVEs:
- CVE‑2026‑23752
- CVE‑2026‑23753
- CVE‑2026‑23756
- CVE‑2026‑23758
The above CVEs were identified and responsibly disclosed by external security researcher Alex Williams from Pellera Technologies.
All customers are strongly advised to upgrade to GFI HelpDesk 4.99.9 to benefit from these security fixes. Download the new version here.
Downloads and Upgrades:
For product downloads and information about upgrading GFI HelpDesk, visit the GFI Upgrade Center.
If you have additional queries about these changes, please do not hesitate to contact us or an authorized GFI Partner directly.