Known Vulnerabilities for products from Fortra
Listed below are 9 of the newest known vulnerabilities associated with the vendor "Fortra".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-12164 json | Not Provided | 2026-06-23 | 2026-06-24 | |
| CVE-2026-12163 json | Not Provided | 2026-06-23 | 2026-06-24 | |
| CVE-2026-9863 json | Not Provided | 2026-06-15 | 2026-06-15 | |
| CVE-2026-9862 json | Not Provided | 2026-06-15 | 2026-06-15 | |
| CVE-2026-1089 json | Not Provided | 2026-04-21 | 2026-04-21 | |
| CVE-2026-0972 json | HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0. Note: The title, details,... | Not Provided | 2026-04-21 | 2026-04-29 |
| CVE-2026-0971 json | An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users bei... | Not Provided | 2026-04-21 | 2026-04-23 |
| CVE-2025-14362 json | The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to... | Not Provided | 2026-04-21 | 2026-04-23 |
| CVE-2025-1241 json | Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a st... | Not Provided | 2026-04-21 | 2026-04-23 |
| CVE-2024-0204 json | 9.8 - CRITICAL | 2024-01-22 | 2024-02-02 | |
| CVE-2023-6253 json | 6 - MEDIUM | 2023-11-22 | 2023-11-30 | |
| CVE-2023-0669 json | Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the Licens... | 7.2 - HIGH | 2023-02-06 | 2023-04-10 |
| CVE-2021-26837 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2023-09-19 | 2023-09-20 |