Fortra

Records50All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Fortra records in CISA KEV

TI-2025-09211 Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability CRITICAL 100KEV 2025-09-29 TI-2022-18577 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability HIGH 84KEV 2023-03-30 TI-2022-20934 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability CRITICAL 100KEV 2023-03-30 TI-2023-00634 Fortra GoAnywhere MFT Remote Code Execution Vulnerability CRITICAL 91KEV 2023-02-10

Components

Products in the NVD configurations · select one to filter the records

Goanywhere Managed File Transfer 13 records CRITICAL Filecatalyst Workflow 4 records CRITICAL Core Privileged Access Manager Server 2 records MEDIUM File Integrity Monitoring 2 records LOW Filecatalyst Direct 2 records MEDIUM Robot Schedule 2 records LOW Delivernow 1 record HIGH Digital Guardian Agent 1 record LOW

Records

2 records in Core Privileged Access Manager Server · all components

TI-2026-08630 CVE-2026-9862 · GHSA-32v6-8gq7-4gxm

Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability

MEDIUM 51

Fortra's Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00992 Published 2026-06-15 No fix listed CWE-78

TI-2026-08631 CVE-2026-9863 · GHSA-cvv9-gwh6-485x

Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability

MEDIUM 41

Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00595 Published 2026-06-15 No fix listed CWE-78

Open these records in search →