Maximum severity GoAnywhere MFT flaw exploited as zero day

Friday, September 26, 2025 1:50 PM | BleepingComputer
Hackers are actively exploiting a maximum severity vulnerability (CVE-2025-10035) in Fortra's GoAnywhere MFT that allows injecting commands remotely without authentication. [...]