Fortra
4 Fortra flaws are on CISA's list of vulnerabilities attackers have used, 0 of them added in 2026. CISA says 2 are known to be used by ransomware. The latest was added Sep 29, 2025.
4on CISA's list, all time
0added in 2026
0in the last 90 days
2used by ransomware
2zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| GoAnywhere MFT | 2 | Sep 29, 2025 |
| Cobalt Strike | 2 | Mar 30, 2023 |
Latest Fortra flaws
- GoAnywhere MFTFortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
- Cobalt StrikeFortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
- Cobalt StrikeFortra Cobalt Strike User Interface Remote Code Execution Vulnerability
- GoAnywhere MFTFortra GoAnywhere MFT Remote Code Execution Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.