← All advisories

Medium severity5.4NVD Advisory· Published Apr 21, 2026· Updated Apr 29, 2026

CVE-2026-0972

CVE-2026-0972

Description

HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0.

Note: The title, details, and description of this CVE were corrected post-publishing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Fortra/Goanywhere Managed File Transfer
cpe:2.3:a:fortra:goanywhere_managed_file_transfer:*:*:*:*:*:*:*:*
Range: <7.10.0
Fortra/GoAnywhere MFTllm-fuzzy
Range: <7.10.0

Patches

Vulnerability mechanics

References

2

www.fortra.com/security/advisories/product-security/fi-2026-006nvdVendor Advisory
seclists.org/fulldisclosure/2026/Apr/8nvd

News mentions

0

No linked articles in our index yet.