Home / CVEs

Exploited vulnerabilities (CISA KEV)

CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.

2 result(s)

Export this search: RSS · CSV · STIX

CVE-2025-10035 Critical · 9.8 KEV Urgent · 83 Public exploit Ransomware CWE-77 Sep 18, 2025

Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.

CVE-2023-0669 High · 7.2 KEV Urgent · 86 Public exploit Ransomware CWE-502 Feb 6, 2023

Fortra GoAnywhere MFT Remote Code Execution Vulnerability

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.