CVE-2023-0669Used in ransomware
FO
Fortra GoAnywhere MFT
Fortra GoAnywhere MFT Remote Code Execution Vulnerability
What it is
Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Fortra entries on the list
- GoAnywhere MFT Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability CVE-2025-10035 · Sep 29, 2025
- Cobalt Strike Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability CVE-2022-42948 · Mar 30, 2023
- Cobalt Strike Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability CVE-2022-39197 · Mar 30, 2023