ACTIVELY EXPLOITED
CVE-2022-42948: Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
| Vendor | Fortra |
|---|---|
| Product | Cobalt Strike |
| Actively exploited | Yes |
| Added to CISA KEV | 30 Mar 2023 |
| CISA federal deadline | 20 Apr 2023 |
| Weakness (CWE) | CWE-116, CWE-79 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution.
SOURCES
Other Fortra flaws
- CVE-2025-10035: Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability
- CVE-2022-39197: Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
- CVE-2023-0669: Fortra GoAnywhere MFT Remote Code Execution Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.