Fortra GoAnywhere MFT

Name: Fortra GoAnywhere MFT
Brand: Fortra

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical1high5medium0low

updated 2026-10-27

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-0669US	high7.2OT critical	100.0% (100th)	KEV	no fix	2023-02-06	≤ 0 ≤7.1.1
CVE-2025-10035US	critical9.8OT critical	99.8% (100th)	KEV	no fix	2025-09-18	2 versions
CVE-2024-0204US	critical9.8	95.1% (100th)	Exploit	7.4.1	2024-01-22	2 versions
CVE-2024-25157US	medium6.5	0.50% (42nd)	—	7.6.0	2024-08-14	6.0.1 → 7.6.0
CVE-2026-15913US	—	0.44% (38th)	—	7.10.2	2026-09-09	< 7.10.2
CVE-2024-25156US	medium6.5	0.39% (33rd)	—	7.4.2	2024-03-14	3 versions
CVE-2025-3871US	—OT elevated	0.38% (32nd)	—	7.8.1	2025-07-16	2 versions
CVE-2024-9945US	—	0.32% (24th)	—	7.7.0	2024-12-13	2 versions
CVE-2025-0049US	medium4.3	0.27% (19th)	—	7.8.0	2025-04-28	< 7.8.0
CVE-2026-1089US	—	0.23% (14th)	—	7.10.0	2026-04-21	2 versions
CVE-2024-11922US	medium5.4	0.23% (13th)	—	7.8.0	2025-04-28	2 versions
CVE-2025-14362US	—	0.19% (9th)	—	7.10.0	2026-04-21	2 versions
CVE-2026-0971US	—	0.18% (8th)	—	7.10.0	2026-04-21	2 versions
CVE-2025-8148US	—OT elevated	0.17% (6th)	—	7.9.0	2025-12-05	2 versions
CVE-2026-0972US	—	0.15% (5th)	—	7.10.0	2026-04-21	2 versions
CVE-2025-1241US	medium4.9	0.13% (2nd)	—	7.10.0	2026-04-21	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-425Direct Request ('Forced Browsing')2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-23Relative Path Traversal1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.