managed file transfer vulnerabilities and fixes
Recent CVEs affecting managed file transfer, with upgrade or downgrade steps. 1 tracked.
managed file transfer has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-08-18. Highest priority: CVE-2026-61003 (score 44/100).
- CVE-2026-61003 CRITICAL 9.9 DOWNGRADE Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime
FAQ
How do I fix managed file transfer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is managed file transfer being exploited right now?
None of the tracked managed file transfer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which managed file transfer CVE should I patch first?
CVE-2026-61003 currently ranks highest (44/100): Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime .