Fortra vulnerabilities

47 published CVEs name Fortra among the affected products; CISA lists 2 of them as exploited in the wild.

Critical 11High 13Medium 22Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2025-10035
Deserialization Vulnerability in GoAnywhere MFT's License Servlet
Fortra · GoAnywhere MFT
ExploitedCritical10.0
CVE-2023-0669
Fortra GoAnywhere MFT License Response Servlet Command Injection
Fortra · Goanywhere MFT
ExploitedHigh7.2

CVE-2026-14316
Heap buffer overflow in boks_sshd revoked-key error handling
Fortra · Core Privileged Access Manager (BoKS)
High8.1
CVE-2026-9864
Fortra BoKS Server Agent adjoin machine-account password generation vulnerability
Fortra · Core Privileged Access Manager (BoKS)
Medium4.8
CVE-2026-12627
Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability
Fortra · Fortra's Core Privileged Access Manager (BoKS)
Critical9.8
CVE-2026-79896
Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
Fortra · BoKS Manager
High7.5
CVE-2026-79898
Fortra BoKS Manager crlserver command injection vulnerability
Fortra · BoKS Manager
Critical9.1
CVE-2026-79899
Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
Fortra · BoKS Manager
High7.9
CVE-2026-79900
Heap overflow in KSL checksum initialization
Fortra · BoKS Manager boks-server
Medium6.5
CVE-2026-79901
Predictable Active Directory service-account passwords in BoKS Manager
Fortra · BoKS Manager boks-server
Critical9.9
CVE-2026-15913
Path Traversal in Fortra's GoAnywhere MFT Endpoint
Fortra · GoAnywhere MFT
High7.7
CVE-2026-12164
Privilege Escalation in Fortra File Integrity Monitoring (FIM)
Fortra · File Integrity Monitoring (FIM)
Medium4.4