VulnerabilitycriticalExploited in the wild

Fortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT Vulnerability

The Hacker Newsby @TheHackersNewsSep 19, 2025 · 14:12 UTC (Sep 19, 2025)2 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2025-10035 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-10035 CVE-2023-0669 CVE-2024-0204

Tags: cve-2025-10035 cve-2023-0669 cve-2024-0204 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-0669	Pre-Authentication Deserialization RCE in Fortra GoAnywhere MFT	7.2	100%	KEVRansomwarePoC ×3	Feb 6, 2023 KEV Feb 10, 2023
CVE-2024-0204	Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal	9.8	95%		Jan 22, 2024
CVE-2025-10035	Deserialization Flaw in Fortra GoAnywhere MFT License Servlet Enables RCE	9.8	100%	KEVRansomwarePoC	Sep 18, 2025 KEV Sep 29, 2025

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Sep 19, 2025 Vulnerability / Threat Intelligence Fortra has disclosed details of a critical security flaw in GoAnywhere Managed File Transfer (MFT) software that could result in the execution of arbitrary commands. The vulnerability, tracked as CVE-2025-10035 , carries a CVSS score of 10. 0, indicating maximum severity.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.