DeutschShown in its original language — a full translation is planned for a future version.
Fortra GoAnywhere MFT: Mehrere Schwachstellen
view advisory published 2026-04-21
Ein Angreifer kann mehrere Schwachstellen in Fortra GoAnywhere MFT ausnutzen, um Informationen offenzulegen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-1089US | — | — | ||
User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure. | ||||
| CVE-2026-0972US | — | — | ||
HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0.
Note: The title, details, and description of this CVE were corrected post-publis… | ||||
| CVE-2026-0971US | — | — | ||
An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the… | ||||
| CVE-2025-1241US | medium4.9 | — | ||
Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decrypt… | ||||
| CVE-2025-14362US | — | — | ||
The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-1216 - CSAF Versionself
- WID-SEC-2026-1216 - Portal Versionself
- Fortra Security Advisory FI-2026-001 vom 2026-04-21external
- Fortra Security Advisory FI-2026-002 vom 2026-04-21external
- Fortra Security Advisory FI-2026-003 vom 2026-04-21external
- Fortra Security Advisory FI-2026-004 vom 2026-04-21external
- Fortra Security Advisory FI-2026-005 vom 2026-04-21external
- Fortra Security Advisory FI-2026-006 vom 2026-04-21external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan