+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure (/showthread.php?tid=6310291)
Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure - Stanley - Oct 5, 2025
Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure
Cybersecurity company watchTowr Labs has disclosed that it has "credible evidence" of active exploitation of the recently disclosed security flaw in Fortra GoAnywhere Managed File Transfer (MFT) software as early as September 10, 2025, a whole week before it was publicly disclosed.
"This is not 'just' a CVSS 10.0 flaw in a solution long favored by APT groups and ransomware operators – it is a
https://thehackernews.com/2025/09/fortra-goanywhere-cvss-10-flaw.html
RE: Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure - Oh_Well - Oct 5, 2025
Serious stuff, a CVSS 10 flaw being exploited before disclosure means someone was already in the know
RE: Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure - Fish - Oct 6, 2025
Good on them for publicly disclosing the exploit. One week is still a long time to wait though
RE: Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure - Aeowulf - Oct 6, 2025
Used in the wild for at LEAST two weeks before it was discovered. Damn.
RE: Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure - Vectura - Oct 6, 2025
That’s bad, a CVSS 10 exploit used before disclosure is as serious as it gets. Anyone running GoAnywhere needs to act fast.
RE: Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure - plops - Oct 6, 2025
Damn a 10/10. Im sure file transfers are probably close to the worse
RE: Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure - The Joker - Oct 6, 2025
Hmm. Someone made a backdoor and got caught..
RE: Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure - B3A - Oct 6, 2025
This one seems like an inside job
RE: Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure - DAL-SHA - Oct 7, 2025
Zero-day exploit hitting Fortra GoAnywhere before disclosure is scary😈 Shows how attackers act fast once flaws leak—patches must be urgent✌✌