CVE-2026-15913Path Traversal in Fortra's GoAnywhere MFT Endpoint Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 09/09/2026 Severity High CVE-2026-12164Privilege Escalation in Fortra File Integrity Monitoring (FIM) Exploitation status Not known exploited Fix Affected product F File Integrity Monitoring (FIM) Published 06/23/2026 Severity Medium CVE-2026-12163Stored XSS in Fortra File Integrity Monitoring (FIM) Exploitation status Not known exploited Fix Affected product F File Integrity Monitoring (FIM) Published 06/23/2026 Severity Medium CVE-2026-9863Core Privileged Access Manager (BoKS) upgrade tooling command injection vulnerability Exploitation status Not known exploited Fix Affected product C Core Privileged Access Manager (BoKS) Published 06/15/2026 Severity High CVE-2026-9862Core Privileged Access Manager (BoKS) autoregistration service command injection vulnerability Exploitation status Not known exploited Fix Affected product C Core Privileged Access Manager (BoKS) Published 06/15/2026 Severity Critical CVE-2026-1089User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 04/21/2026 Severity Medium CVE-2026-0972HTML Injection possible in system generated emails in Fortra's GoAnywhere MFT Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 04/21/2026 Severity Medium CVE-2026-0971GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeout Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 04/21/2026 Severity Medium CVE-2025-14362GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 04/21/2026 Severity High CVE-2025-1241Encryption vulnerable to brute-force decryption in GoAnywhere MFT Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 04/21/2026 Severity Medium CVE-2025-13532Weak Password Hash in Core Privileged Access Manager (BoKS) Exploitation status Not known exploited Fix Affected product C Core Privileged Access Manager (BoKS) Published 12/16/2025 Severity Medium CVE-2025-8148CVE-2025-8148 Improper Access Control in SFTP service of GoAnywhere MFT Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 12/05/2025 Severity Medium CVE-2025-10035Deserialization Vulnerability in GoAnywhere MFT's License Servlet Exploitation status KEV Fix Affected product G GoAnywhere MFT Published 09/18/2025 Severity Critical CVE-2025-8450Unrestricted File Upload in FileCatalyst Exploitation status Not known exploited Fix Affected product F FileCatalyst Published 08/19/2025 Severity High CVE-2025-3871Broken Access Control Leads to Limited Denial of Service in GoAnywhere MFT 7.8.0 and earlier Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 07/16/2025 Severity Medium CVE-2025-5141Core Privileged Access Manager (BoKS) Leakage of Sensitive Data via the Cache Exploitation status Not known exploited Fix Affected product C Core Privileged Access Manager (BoKS) Published 06/17/2025 Severity Medium CVE-2024-11922Input Validation vulnerability in Web Client emails that do not go through Secure Mail Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 04/28/2025 Severity Medium CVE-2025-0049Disclosure of sensitive information in an error message in GoAnywhere prior to version 7.8.0 Exploitation status Not known exploited Fix Affected product G GoAnywhere Published 04/28/2025 Severity Low CVE-2024-11923Sensitive Information Disclosure in Fortra Application Hub Prior to version 1.3 Exploitation status Not known exploited Fix Affected product F Fortra Application Hub Published 01/17/2025 Severity Medium CVE-2024-9945Limited Information Disclosure in GoAnywhere MFT Prior to 7.7.0 Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 12/13/2024 Severity Medium CVE-2024-3334USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0 Exploitation status Not known exploited Fix Affected product D Digital Guardian Agent Published 11/15/2024 Severity Medium CVE-2024-8264Sensitive information in agent log file when detailed logging is enabled with Robot Schedule Enterprise prior to version 3.05 Exploitation status Not known exploited Fix Affected product R Robot Schedule Enterprise Published 10/09/2024 Severity Medium CVE-2024-6632SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier) Exploitation status Not known exploited Fix Affected product F FileCatalyst Workflow Published 08/27/2024 Severity High CVE-2024-6633Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier) Exploitation status Not known exploited Fix Affected product F FileCatalyst Workflow Published 08/27/2024 Severity Critical CVE-2024-25157Authentication bypass in GoAnywhere MFT prior to 7.6.0 Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 08/14/2024 Severity Medium CVE-2024-5276SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier) Exploitation status Public exploit Fix Not confirmed Affected product F FileCatalyst Workflow Published 06/25/2024 Severity Critical CVE-2024-5275Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier) Exploitation status Not known exploited Fix Affected product F FileCatalyst Direct Published 06/18/2024 Severity High CVE-2024-4332Improper Authentication in Tripwire Enterprise 9.1.0 APIs Exploitation status Not known exploited Fix Affected product T Tripwire Enterprise Published 06/03/2024 Severity Critical CVE-2024-0259Privilege Escalation in Robot Schedule Enterprise Agent for Windows prior to version 3.04 Exploitation status Not known exploited Fix Affected product R Robot Schedule Enterprise Agent Published 03/28/2024 Severity High CVE-2024-25156Path traversal in GoAnywhere MFT 7.4.1 and Earlier Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 03/14/2024 Severity Medium CVE-2024-25155Reflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier Exploitation status Not known exploited Fix Affected product F FileCatalyst Published 03/13/2024 Severity High CVE-2024-25154Path Traversal in FileCatalyst Direct 3.8.8 and Earlier Exploitation status Not known exploited Fix Affected product F FileCatalyst Published 03/13/2024 Severity Medium CVE-2024-25153Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114 Exploitation status Public exploit Fix Affected product F FileCatalyst Published 03/13/2024 Severity Critical CVE-2024-0204Authentication Bypass in GoAnywhere MFT Exploitation status Not known exploited Fix Affected product G GoAnywhere MFT Published 01/22/2024 Severity Critical CVE-2023-6253Saved Uninstall Key in Digital Guardian Agent Uninstaller Exploitation status Not confirmed Fix Affected product D Digital Guardian Agent Published 11/22/2023 Severity Unknown CVE-2021-26837Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 09/18/2023 Severity Unknown CVE-2023-2991Fortra Globalscape Administration Server Information Disclosure Exploitation status Public exploit Fix Not confirmed Affected product G Globalscape EFT Published 06/22/2023 Severity Unknown CVE-2023-2990Fortra Globalscape Administration Server Denial of Service Exploitation status Public exploit Fix Affected product G Globalscape EFT Published 06/22/2023 Severity Unknown CVE-2023-2989Fortra Globalscape Administration Server Out of Bounds Memory Read Exploitation status Public exploit Fix Affected product G Globalscape EFT Published 06/22/2023 Severity Unknown CVE-2023-0669Fortra GoAnywhere MFT License Response Servlet Command Injection Exploitation status KEV Fix Affected product G GoAnywhere MFT Published 02/06/2023 Severity High 
.svg){kind=icon}
.svg){kind=icon}
