CVE-2026-15913 — Path Traversal in Fortra's GoAnywhere MFT Endpoint
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mai…
Published: 2026-09-09 · CVSS: 7.7 · CVSS 3.1
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7