medium5.4
CVE-2026-0972
HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0.
Impact
HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0. Note: The title, details, and description of this CVE were corrected post-publishing.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortra | Goanywhere Managed File Transfer | before 7.10.0 |