PT-2026-33974 · Fortra · Goanywhere Mft

Published 2026-04-21 · Updated 2026-04-21 · CVE-2025-1241

X.com · Cvenew

CVSS v3.1

5.8

Medium

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

CVE-2025-1241 Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-f… https://t.co/ZVsQG9PFNy

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2025-1241

Affected Products

Goanywhere Mft

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-1241 · Security Note
• https://twitter.com/CVEnew/status/2046601496813244919 · Twitter Post
• https://fortra.com/security/advisories/product-security/FI-2026-001 · Note