medium6.5
CVE-2026-1089
User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Informati…
Impact
User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortra | Goanywhere Managed File Transfer | before 7.10.0 |