CVE-2026-0971

· NIST NVD ↗

An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page.

MEDIUM
CVSS severity
4.3
CVSS base score
2026-04-21
Published

CWE codes

CWE-613

Affected products

fortra:goanywhere_managed_file_transfer

Sources