https://pwn.watch/i/fortra-goanywhere-mft-cve-2025-10035 Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection. Added to CISA KEV on 2025-09-29. en Mon, 29 Sep 2025 00:00:00 GMT https://pwn.watch/i/fortra-goanywhere-mft-cve-2025-10035 https://pwn.watch/i/fortra-goanywhere-mft-cve-2025-10035#2025-09-29-dd4f7e24 Mon, 29 Sep 2025 00:00:00 GMT critical <p>Fortra GoAnywhere MFT: GoAnywhere MFT Deserialization of Untrusted Data Vulnerability: CISA added CVE-2025-10035 to the KEV catalog (due 2025-10-20).</p>