CVE-2026-0971

Published Apr 21, 2026

Last updated 3 days ago

Overview

Description
An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page.
Source
df4dee71-de3a-4139-9588-11b62fe6c0ff
NVD status
Analyzed
Products
goanywhere_managed_file_transfer

Risk scores

CVSS 3.1

Type
Secondary
Base score
4.3
Impact score
1.4
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Severity
MEDIUM

Weaknesses

df4dee71-de3a-4139-9588-11b62fe6c0ff
CWE-613

Social media

Hype score
Not currently trending

Configurations

References

Sources include official advisories and independent security research.