Veille CVE

Recherche « Fortra GoAnywhere MFT »

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Fortra GoAnywhere MFT » ✕
  1. CVE-2026-15913 7.7 Élevée

    Fortra GoAnywhere MFT

    In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read.

  2. CVE-2025-10035 9.8 Critique Exploitée Rançongiciel

    Fortra GoAnywhere MFT · Fortra goanywhere managed file transfer

    A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.