Skip to contentFortra Goanywhere vulnerabilities
- fortra goanywhere mftPath Traversal in Fortra's GoAnywhere MFT EndpointCVE-2026-159137.7 High
- fortra goanywhere mft, goanywhere managed file transfer +1 moreUser‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS LookupsCVE-2026-10896.5 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreHTML Injection possible in system generated emails in Fortra's GoAnywhere MFTCVE-2026-09725.4 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreGoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeoutCVE-2026-09714.3 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreGoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain CircumstancesCVE-2025-143627.3 High
- fortra goanywhere mft, goanywhere agents, goanywhere managed file transfer +2 moreEncryption vulnerable to brute-force decryption in GoAnywhere MFTCVE-2025-12415.8 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreCVE-2025-8148 Improper Access Control in SFTP service of GoAnywhere MFTCVE-2025-81484.2 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreDeserialization Vulnerability in GoAnywhere MFT's License ServletCVE-2025-10035In KEVPublic exploitEPSS 99.8%10.0 Critical
- fortra goanywhere mftBroken Access Control Leads to Limited Denial of Service in GoAnywhere MFT 7.8.0 and earlierCVE-2025-38715.3 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreInput Validation vulnerability in Web Client emails that do not go through Secure MailCVE-2024-119226.3 Medium
- fortra goanywhere, goanywhere managed file transfer +1 moreDisclosure of sensitive information in an error message in GoAnywhere prior to version 7.8.0CVE-2025-00493.5 Low
- fortra goanywhere mftLimited Information Disclosure in GoAnywhere MFT Prior to 7.7.0CVE-2024-99455.3 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreAuthentication bypass in GoAnywhere MFT prior to 7.6.0CVE-2024-251576.5 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 morePath traversal in GoAnywhere MFT 7.4.1 and EarlierCVE-2024-251566.5 Medium
- fortra goanywhere mft, goanywhere managed file transfer +1 moreAuthentication Bypass in GoAnywhere MFTCVE-2024-0204Public exploitEPSS 95.1%9.8 Critical
- fortra goanywhere mft, goanywhere managed file transfer +1 moreFortra GoAnywhere MFT License Response Servlet Command InjectionCVE-2023-0669In KEVPublic exploitEPSS 100.0%7.2 High