Fortra security advisory (AV26-374)

Serial number: AV26-374
Date: April 21, 2026

On April 21, 2026, Fortra published security advisories to address vulnerabilities in the following product:

• Fortra's GoAnywhere MFT – versions prior to 7.10.0

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• FI-2026-002 - GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances
• FI-2026-004 - GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances
• Fortra Product CVEs