Critical GoAnywhere Security Flaw: Is Your Data at Risk?
Fortra’s GoAnywhere MFT software has a critical security flaw, CVE-2025-10035, that could allow command execution. With a CVSS score of 10.0, it’s serious business. Users should update to the latest version or ensure the Admin Console isn’t publicly accessible. Meanwhile, hackers are probably already sharpening their digital swords.
Hot Take:
Looks like GoAnywhere MFT is auditioning for the role of “Security Flaw of the Year.” With a CVSS score of 10.0, it’s basically the cybersecurity equivalent of a natural disaster. If you’re using this software, it’s time to batten down the hatches and update faster than a caffeinated squirrel on roller skates!
Key Points:
- Fortra’s GoAnywhere MFT software has a critical flaw with a CVSS score of 10.0.
- The vulnerability, CVE-2025-10035, could lead to arbitrary command execution.
- The flaw involves deserialization in the License Servlet of the software.
- Successful exploitation relies on public internet accessibility.
- Patching to version 7.8.4 or Sustain Release 7.6.3 is advised to prevent threats.
Already a member? Log in here