Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-1089

User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fortra

Description

User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortra GoAnywhere MFT

Default version status: unaffected

  • 0 to < 7.10.0affected

References