Fortra® Security & Trust Center

railway
Blog

CVE-2025-1727 and Railway Cybersecurity

By Meriam Senouci on Mon, 07/21/2025
Learn about CVE-2025-1727, a high severity vulnerability that impacts railway systems, its impacts on critical infrastructure, and how federal compliance regulations can help defend against the threat of exploitation.
Security Advisory

Broken Access Control Leads to Limited Denial of Service in GoAnywhere MFT Prior to 7.8.1

Wed, 07/16/2025
Broken access control in Fortra's GoAnywhere MFT prior to 7.8.1 allows an attacker to create a denial of service situation when configured to use GoAnywhere One-Time Password (GOTP) email two-factor authentication (2FA) and the user has not set an email address. In this scenario, the attacker may enter the email address of a known user when prompted and the user will be disabled if that user has...
FI-2025-009
Medium
CVE-2025-3871
Emerging Threats

FortiWeb Unauthenticated SQL Injection in GUI

Fri, 07/11/2025
Fortra is actively researching a critical unauthenticated SQL injection vulnerability affecting FortiWeb products identified as CVE-2025-25257. This vulnerability allows remote attackers to execute arbitrary SQL commands via crafted HTTP(s) requests without authentication, potentially resulting in full system compromise.
Patch Tuesday Analysis
Blog

July 2025 Patch Tuesday Analysis

By Tyler Reguly on Tue, 07/08/2025
Today’s Patch Tuesday Alert addresses Microsoft’s July 2025 Security Updates. We are actively working on coverage for these vulnerabilities and expect to ship ASPL-1164 as soon as coverage is completed. In-The-Wild & Disclosed CVEsCVE-2025-49719The only publicly disclosed vulnerability this month is an information disclosure in Microsoft SQL Server. Successful...
Threat Research & Intelligence
Vulnerability Management