https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:04:53.718991+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-307979 EUVD-2026-307979 2026-10-03T10:04:53.769888+00:00 EUVD-2026-307979 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0972 fkie_cve-2026-0972 2026-10-03T10:04:53.769924+00:00

HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0.

Note: The title, details, and description of this CVE were corrected post-publishing.

 https://cve.radiocsirt.org/vuln/ghsa-rpc6-m3h5-gmf2 GHSA-rpc6-m3h5-gmf2 2026-10-03T10:04:53.769959+00:00

The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1216 WID-SEC-W-2026-1216 — Fortra GoAnywhere MFT: Mehrere Schwachstellen 2026-10-03T10:04:53.769978+00:00

Ein Angreifer kann mehrere Schwachstellen in Fortra GoAnywhere MFT ausnutzen, um Informationen offenzulegen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.