Medium severity6.5NVD Advisory· Published Apr 21, 2026· Updated Apr 23, 2026
CVE-2026-1089
CVE-2026-1089
Description
User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure.
Affected products
1- cpe:2.3:a:fortra:goanywhere_managed_file_transfer:*:*:*:*:*:*:*:*Range: <7.10.0
Patches
Vulnerability mechanics
References
1- www.fortra.com/security/advisories/product-security/fi-2026-005nvdVendor Advisory
News mentions
0No linked articles in our index yet.