NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability1 · 1 read

CVE-2024-0204

CVSS 3.1: 9.8 critical
EPSS: 95%p100
Published: Jan 22, 2024 · Jan 22, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-0204 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

Vendors: fortra

Products: goanywhere managed file transfer

Weakness: CWE-425

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (95.1%)

In the news

10 stories

PoC for easily exploitable Fortra GoAnywhere MFT vulnerability released (CVE-2024-0204)

Help Net SecurityJun 8, 10:34 UTC · Jun 8, 2026Exploit / PoCExploitedCVE-2024-0204 CVE-2023-06692 · 1 read

60

Fortra addressed a maximum severity flaw in GoAnywhere MFT software

Security AffairsSep 19, 17:32 UTC · Sep 19, 2025Exploit / PoCExploitedCVE-2025-10035 CVE-2024-02042 · 1 read

60

Fortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT Vulnerability

The Hacker NewsSep 19, 14:12 UTC · Sep 19, 2025VulnerabilityExploitedCVE-2025-10035 CVE-2023-0669 CVE-2024-02042 · 1 read

60

PoC exploit for critical Fortra FileCatalyst MFT vulnerability released (CVE-2024-25153)

Help Net SecurityMar 19, 00:00 UTC · Mar 19, 2024Exploit / PoCExploitedCVE-2024-25153 CVE-2024-0204 CVE-2023-06692 · 1 read

60

Week in review: 15 million Trello users’ scraped data on sale, attackers can steal NTLM hashes

Help Net SecurityJan 28, 00:00 UTC · Jan 28, 2024RansomwareExploitedCVE-2023-35636 CVE-2024-0204 CVE-2024-232222

60

Patch Your GoAnywhere MFT Immediately

The Hacker NewsJan 25, 04:21 UTC · Jan 25, 2024VulnerabilityExploitedCVE-2024-0204 CVE-2023-06692 · 1 read

60

Experts released PoC exploit for Fortra GoAnywhere MFT flaw CVE-2024

Security AffairsJan 24, 14:37 UTC · Jan 24, 2024Exploit / PoCCVE-2024-0204 CVE-2023-06693 · 1 read

60

Exploit Code Released For Critical Fortra GoAnywhere Bug

Infosecurity MagazineJan 24, 10:15 UTC · Jan 24, 2024RansomwareCVE-2024-0204 CVE-2023-06694 · 1 read

60

Watch out, a new critical flaw affects Fortra GoAnywhere MFT

Security AffairsJan 23, 22:09 UTC · Jan 23, 2024RansomwareCVE-2024-0204 CVE-2023-06692 · 1 read

60

Cybersecurity experts warn of new vulnerabilities affecting Apple, Atlassian and Fortra products

The RecordJan 23, 21:31 UTC · Jan 23, 2024VulnerabilityExploitedCVE-2024-23222 CVE-2024-0204 CVE-2023-22527+21

60