Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Fortra: actively exploited vulnerabilities

4 vulnerabilities in Fortra products (Cobalt Strike, GoAnywhere MFT) are in CISA’s catalog of exploited vulnerabilities. Last added: September 29, 2025.

Fortra security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Fortra category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single Fortra product (Cobalt Strike, GoAnywhere MFT…) rather than the whole brand.

  • Cobalt Strike2 vulnerabilities, Security products
  • GoAnywhere MFT2 vulnerabilities, File transfer (MFT)

Name used by CISA: Fortra. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Fortra list.

  1. Rank 1

    Fortra GoAnywhere MFTCVE-2025-10035

    Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

    Ransomware

    CVSS severity 9.8critical

    Added Sep 29, 2025

  2. Rank 2

    Fortra Cobalt StrikeCVE-2022-42948

    Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

    CVSS severity 9.8critical

    Added Mar 30, 2023

  3. Rank 3

    Fortra GoAnywhere MFTCVE-2023-0669

    Fortra GoAnywhere MFT Remote Code Execution Vulnerability

    Ransomware

    CVSS severity 7.2high

    Added Feb 10, 2023

  4. Rank 4

    Fortra Cobalt StrikeCVE-2022-39197

    Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

    CVSS severity 6.1medium

    Added Mar 30, 2023

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.