# CVE-2026-0971

> Vulnerability · severity: **MEDIUM** (CVSS 4.3).

## Description

An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page.

## Key facts

- **CVE ID:** CVE-2026-0971
- **Published:** 2026-04-21
- **CVSS severity:** MEDIUM
- **CVSS base score:** 4.3
- **CWE codes:** CWE-613

## Affected products

- `fortra:goanywhere_managed_file_transfer`

## Primary sources

- NIST NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-0971

## Citation

> AI Analytics. CVE-2026-0971. Retrieved 2026-07-20 from https://api.ai-analytics.org/cve/CVE-2026-0971. Derived from NIST NVD. Licensed CC0.

---

*[Dataset catalog](https://api.ai-analytics.org/datasets/) · [AI Analytics](https://api.ai-analytics.org/) · CC0 1.0*