{"id":"CVE-2026-0971","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-0971","generatedAt":"2026-10-28T09:26:30.547Z","title":"An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page.","description":"An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page.","published":"2026-04-21T15:16:36.000Z","lastModified":"2026-10-25T23:10:00.000Z","status":"Analyzed","sourceIdentifier":"df4dee71-de3a-4139-9588-11b62fe6c0ff","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"},"cwe":["CWE-613"],"affected":["fortra/goanywhere managed file transfer"],"epss":{"score":0.0018,"percentile":0.07509,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.18%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://fortra.com/security/advisories/product-security/fi-2025-013","tags":["Not Applicable"],"source":"df4dee71-de3a-4139-9588-11b62fe6c0ff"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-0971","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}