Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Fortra GoAnywhere MFT 7.10.0 Clear all filters
TI-2026-00736 CVE-2026-0971 · GHSA-436j-4grc-7cjp

GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeout

Priority LOW 19

An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0018 Published 2026-04-21 Fixed in 7.10.0 CWE-613
TI-2025-13122 CVE-2025-14362 · GHSA-9wqc-r42g-8qgm

GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances

Priority LOW 37

The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00194 Published 2026-04-21 Fixed in 7.10.0 CWE-307
TI-2025-01061 CVE-2025-1241 · GHSA-fcmx-wcc5-gf8w

Encryption vulnerable to brute-force decryption in GoAnywhere MFT

Priority LOW 25

Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decryption of data.

CVSS 3.1MEDIUM 5.8 Network High privileges No interaction EPSS 0.00127 Published 2026-04-21 Fixed in 7.10.0 CWE-326