CVE-2026-0972

概要

参考情報

• fortra.com/security/advisories/product-security/fi-2026-006 · Vendor Advisory
• seclists.org/fulldisclosure/2026/Apr/8

goanywhere managed file transfer のその他の脆弱性

• CVE-2026-1089中 6.5User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebi…
• CVE-2026-0971中 4.3An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected t…
• CVE-2025-1241中 4.9Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which a…
• CVE-2025-14362高 7.3The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to…
• CVE-2025-8148中 4.2An Improper Access Control in the SFTP service in Fortra's GoAnywhere MFT prior to version 7.9.0 allows Web Users with an Authentication Ali…