Detections
Analytics
CVE-2026-15913
high
Description
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read.
References
https://www.fortra.com/security/advisories/product-security/fi-2026-011