Skip to content
OpenAdvisories

Archive

18 September 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-10035 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Deserialization Vulnerability in GoAnywhere MFT's License Servlet

    A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.

    KEV Sep 29, 2025