CVE-2026-0971

—

CVSS 3.1

4.3 medium

EPSS

<1%p8

Published

Apr 21, 2026 (Apr 21, 2026)

Modified

Jun 17, 2026

Description

An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page.

Vendors: fortra
Products: goanywhere managed file transfer
Weakness: CWE-613
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.