Fortra’s GoAnywhere MFT: When File Transfers Get a Little Too Friendly!
Fortra has patched a critical flaw in GoAnywhere MFT software, preventing it from becoming a hacker’s dream playground. This vulnerability, with a perfect CVSS score of 10.0, could allow arbitrary command execution. Time to upgrade faster than a teenager’s phone on update day!
Hot Take:
Fortra’s GoAnywhere software has been caught with its virtual pants down, exposing a critical flaw that can lead to the execution of arbitrary commands. It’s like leaving your front door open with a neon sign saying, “Come on in and hack us!” Quick, someone get the IT team some coffee, they’re going to need it.
Key Points:
- Fortra addressed a critical deserialization vulnerability in GoAnywhere MFT, tracked as CVE-2025-10035.
- The flaw allows an attacker to execute arbitrary commands on affected systems.
- Customers are urged to update to the latest patched version, 7.8.4 or Sustain Release 7.6.3.
- Exploitation depends on the exposure of the GoAnywhere Admin Console to the internet.
- It’s still a mystery whether this flaw has been actively exploited in the wild.
Already a member? Log in here