CVE-2026-15913 in GoAnywhere MFT

الملخص

بحسب MITRE • 09/09/2026

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• مسؤول: Fortra
• حجز: 15/07/2026
• إفشاء: 09/09/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-401899
• CPE: جاهز
• CWE: CWE-22 (مؤكد)
• CVSS: 7.7 (CNA)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-15913
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-15913
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-15913/