CVEvulnerability

CVE-2026-0971

4.3 MEDIUM Published 2026-04-21 Modified 2026-10-25 Official page ↗
Status
Analyzed
Published
2026-04-21
Last modified
2026-10-25
Assigner
df4dee71-de3a-4139-9588-11b62fe6c0ff
CVSS 3.1 (df4dee71-de3a-4139-9588-11b62fe6c0ff)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Weaknesses
CWE-613

Description

An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page.

Affected configurations

• fortra goanywhere managed file transfer (< 7.10.0)

Related

Weakness · not in database (1)

References