Patchfirst: Fortra vulnerabilitieshttps://patchfirst.co/vendor/fortra/New and newly exploited Fortra CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2026-79898: Fortra BoKS Manager contains a command injection vulnerability in crlserverhttps://patchfirst.co/cve/CVE-2026-79898/CVE-2026-79898Thu, 01 Oct 2026 00:00:00 GMTFortra · BoKS Manager. Not in CISA KEV. EPSS 1.0% (higher than 62.6% of CVEs). CVSS 9.1 CRITICAL. Priority 20.5 of 100.CVE-2026-12627: Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in…https://patchfirst.co/cve/CVE-2026-12627/CVE-2026-12627Thu, 01 Oct 2026 00:00:00 GMTFortra · Fortra's Core Privileged Access Manager (BoKS). Not in CISA KEV. EPSS 0.4% (higher than 39.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.3 of 100.CVE-2026-79901: In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory…https://patchfirst.co/cve/CVE-2026-79901/CVE-2026-79901Thu, 01 Oct 2026 00:00:00 GMTFortra · BoKS Manager boks-server. Not in CISA KEV. EPSS 0.3% (higher than 19.4% of CVEs). CVSS 9.9 CRITICAL. Priority 12.4 of 100.[KEV] CVE-2025-10035: Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-10035/CVE-2025-10035#kevMon, 29 Sep 2025 00:00:00 GMTFortra · GoAnywhere MFT. In CISA KEV since 2025-09-29, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1190T1059CVE-2024-5276: SQL Injection Vulnerability in FileCatalyst Workflow 5.1.6 Build 135 (and earlier)https://patchfirst.co/cve/CVE-2024-5276/CVE-2024-5276Tue, 25 Jun 2024 00:00:00 GMTFortra · FileCatalyst Workflow. Not in CISA KEV. EPSS 90.1% (higher than 99.79% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 66.8 of 100.public-exploitCVE-2024-0204: Authentication Bypass in GoAnywhere MFThttps://patchfirst.co/cve/CVE-2024-0204/CVE-2024-0204Mon, 22 Jan 2024 00:00:00 GMTFortra · GoAnywhere MFT. Not in CISA KEV. EPSS 95.1% (higher than 99.86% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 69.4 of 100.public-exploit[KEV] CVE-2022-39197: Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerabilityhttps://patchfirst.co/cve/CVE-2022-39197/CVE-2022-39197#kevThu, 30 Mar 2023 00:00:00 GMTFortra · Cobalt Strike. In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 44.1% (higher than 98.8% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 70.9 of 100.kevpublic-exploitT1059[KEV] CVE-2022-42948: Fortra Cobalt Strike User Interface Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2022-42948/CVE-2022-42948#kevThu, 30 Mar 2023 00:00:00 GMTFortra · Cobalt Strike. In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 2.7% (higher than 85.9% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 62.0 of 100.kevT1190T1059[KEV] CVE-2023-0669: Fortra GoAnywhere MFT Remote Code Execution Vulnerabilityhttps://patchfirst.co/cve/CVE-2023-0669/CVE-2023-0669#kevFri, 10 Feb 2023 00:00:00 GMTFortra · GoAnywhere MFT. In CISA KEV since 2023-02-10, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1210 Exploitation of Remote Services; T1486 Data Encrypted for Impact. Priority 78.0 of 100.kevransomwarepublic-exploitT1190T1210T1486