Exploited vulnerabilities
Fortra
4 Fortra vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue4
Last 12 months0
In ransomware campaigns2
Last addition29 September 2025
The vulnerabilities4
- 29 September 2025CVE-2025-10035GoAnywhere MFTFortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityRansomware
- 30 March 2023CVE-2022-42948Cobalt StrikeFortra Cobalt Strike User Interface Remote Code Execution Vulnerability
- 30 March 2023CVE-2022-39197Cobalt StrikeFortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
- 10 February 2023CVE-2023-0669GoAnywhere MFTFortra GoAnywhere MFT Remote Code Execution VulnerabilityRansomware
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Fortra included.