Ghostwire

CVE-2026-0971: An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web...

MEDIUM CVSS 4.3

Published: April 21, 2026 | Last Modified: April 21, 2026

Description

An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page.

Ghostwire Analysis — What This Means Practically

Medium CVSS score indicates moderate risk — exploitation requires specific conditions or results in limited impact.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References

fortra.com/security/advisories/product-security/fi-2025-013
www.tenable.com/cve/CVE-2026-0971
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-0971
nvd.nist.gov/vuln/detail/CVE-2026-0971