agentprime: fortra-goanywhere-mftEvery new CVE for fortra-goanywhere-mft.https://agentprime.io/CVE-2026-15913: Path Traversal in Fortra's GoAnywhere MFT Endpointhttps://agentprime.io/advisories/CVE-2026-15913/https://agentprime.io/advisories/CVE-2026-15913/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 21:18:54 GMTCVECVE-2026-1089: User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookupshttps://agentprime.io/advisories/CVE-2026-1089/https://agentprime.io/advisories/CVE-2026-1089/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 14:14:58 GMTCVECVE-2026-0972: HTML Injection possible in system generated emails in Fortra's GoAnywhere MFThttps://agentprime.io/advisories/CVE-2026-0972/https://agentprime.io/advisories/CVE-2026-0972/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 14:14:38 GMTCVECVE-2026-0971: GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeouthttps://agentprime.io/advisories/CVE-2026-0971/https://agentprime.io/advisories/CVE-2026-0971/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 14:14:23 GMTCVECVE-2025-14362: GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstanceshttps://agentprime.io/advisories/CVE-2025-14362/https://agentprime.io/advisories/CVE-2025-14362/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 14:14:08 GMTCVECVE-2025-1241: Encryption vulnerable to brute-force decryption in GoAnywhere MFThttps://agentprime.io/advisories/CVE-2025-1241/https://agentprime.io/advisories/CVE-2025-1241/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 14:10:09 GMTCVECVE-2025-8148: CVE-2025-8148 Improper Access Control in SFTP service of GoAnywhere MFThttps://agentprime.io/advisories/CVE-2025-8148/https://agentprime.io/advisories/CVE-2025-8148/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 20:56:05 GMTCVECVE-2025-10035: Deserialization Vulnerability in GoAnywhere MFT's License Servlethttps://agentprime.io/advisories/CVE-2025-10035/https://agentprime.io/advisories/CVE-2025-10035/CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 29 Sept 2025: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Sep 2025 22:01:51 GMTCVEcriticalKEVCVE-2025-3871: Broken Access Control Leads to Limited Denial of Service in GoAnywhere MFT 7.8.0 and earlierhttps://agentprime.io/advisories/CVE-2025-3871/https://agentprime.io/advisories/CVE-2025-3871/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Jul 2025 14:00:27 GMTCVECVE-2024-11922: Input Validation vulnerability in Web Client emails that do not go through Secure Mailhttps://agentprime.io/advisories/CVE-2024-11922/https://agentprime.io/advisories/CVE-2024-11922/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Apr 2025 20:57:37 GMTCVECVE-2024-9945: Limited Information Disclosure in GoAnywhere MFT Prior to 7.7.0https://agentprime.io/advisories/CVE-2024-9945/https://agentprime.io/advisories/CVE-2024-9945/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Dec 2024 15:22:31 GMTCVECVE-2024-25157: Authentication bypass in GoAnywhere MFT prior to 7.6.0https://agentprime.io/advisories/CVE-2024-25157/https://agentprime.io/advisories/CVE-2024-25157/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Aug 2024 15:04:10 GMTCVECVE-2024-25156: Path traversal in GoAnywhere MFT 7.4.1 and Earlierhttps://agentprime.io/advisories/CVE-2024-25156/https://agentprime.io/advisories/CVE-2024-25156/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Mar 2024 14:06:01 GMTCVECVE-2024-0204: Authentication Bypass in GoAnywhere MFThttps://agentprime.io/advisories/CVE-2024-0204/https://agentprime.io/advisories/CVE-2024-0204/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.95 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Jan 2024 18:05:13 GMTCVEcritical