Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-8148 1 Fortra 1 Goanywhere Managed File Transfer 2026-01-30 4.2 Medium
An Improper Access Control in the SFTP service in Fortra's GoAnywhere MFT prior to version 7.9.0 allows Web Users with an Authentication Alias and a valid SSH key but limited to Password authentication for SFTP to still login using their SSH key.
CVE-2021-26837 1 Fortra 1 Delivernow 2024-11-21 9.8 Critical
SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.