Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-0972

HTML Injection possible in system generated emails in Fortra's GoAnywhere MFT

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fortra

Description

HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0. Note: The title, details, and description of this CVE were corrected post-publishing.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortra GoAnywhere MFT

Default version status: affected

  • 0 to < 7.10.0affected

References