FAIL › dossier
Fortra
VENDOR· dossier confidence 0%
Fortra, a cybersecurity vendor, has experienced multiple critical security failures in recent years, including remote code execution vulnerabilities exploited by ransomware groups. These incidents highlight potential weaknesses in their product security and development practices.
PROFILE
CategoryCybersecurityWhat they doFortra provides cybersecurity and data protection solutions, including endpoint management and secure file transfer. The company's products are used by organizations to protect their data and systems.
SECURITY POSTURE
Fortra has demonstrated a history of critical vulnerabilities in its products, indicating a potential weakness in their security development lifecycle. Multiple remote code execution vulnerabilities have been publicly disclosed, often linked to ransomware attacks.
Notable failures
- CVE-2025-10035: GoAnywhere MFT RCE via forged license signatures (ransomware)
- CVE-2023-0669: GoAnywhere MFT pre-authentication RCE
- CVE-2022-42948: Cobalt Strike Java Swing RCE
- CVE-2022-39197: Cobalt Strike XSS vulnerability
Patterns: Remote code execution vulnerabilities; Vulnerabilities linked to ransomware
FAILURE HISTORY · 5
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2025-09-29 | CVE-2025-10035 | critical | Fortra GoAnywhere MFT suffered a deserialization vulnerability allowing command injection via forged license signatures, linked to ransomware. |
| 2023-02-10 | CVE-2023-0669 | critical | Fortra GoAnywhere MFT suffered a pre-authentication remote code execution vulnerability due to deserializing attacker-controlled objects in the License Response Servlet. |
| 2023-03-30 | CVE-2022-42948 | high | Fortra Cobalt Strike UI RCE |
| 2023-03-30 | CVE-2022-39197 | high | Fortra Cobalt Strike XSS allowed remote code execution |
| 2025-09-18 | CVE-2025-10035 | critical | CVE-2025-10035: A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MF |
DOSSIER SOURCES
- Fortran Steel PVT LTD Information - Fortran Steel PVT LTD Company ... · economictimes.indiatimes.com
- Cl0p Ransomware Published Rackspace Files on Leak Site · dailysecurityreview.com
Open questions: What is Fortra's current headquarters location? · What is the current size (employee count or revenue) of Fortra? · What is the ownership structure of Fortra? · What is Fortra's website URL?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-07-22 04:19:17.987110+00:00