Description
User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortra | GoAnywhere MFT | < 7.10.0 | 7.10.0 |
Advisories 1
- WID-SEC-2026-1216 Fortra GoAnywhere MFT: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 22, 2026