A vulnerability classified as problematic has been found in Fortra GoAnywhere MFT up to 7.9.x. This issue affects some unknown processing of the component HTTP Header Handler. This manipulation causes injection.

This vulnerability appears as CVE-2026-1089. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.