Description
HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0.
Note: The title, details, and description of this CVE were corrected post-publishing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortra | GoAnywhere MFT | < 7.10.0 | 7.10.0 |
Advisories 1
- WID-SEC-2026-1216 Fortra GoAnywhere MFT: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 22, 2026