CVE-2024-9945: Fortra GoAnywhere MFT

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An information-disclosure vulnerability exists in Fortra's GoAnywhere MFT application prior to version 7.7.0 that allows external access to the resources in certain admin root folders.

Affected products

• Fortra GoAnywhere MFT: before 7.7.0 (fixed in 7.7.0)

Published 2024-12-13. Last modified 2026-06-17.