CVE-2025-10035
In 6 briefs, most recently 12 October 2025. RSS for this tag
Published 2025-09-18
Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗
Known exploited (CISA KEV)
Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability.
Added 2025-09-29 · used in ransomware campaigns
Coverage in DanSec Daily
- SonicWall SSL VPN compromises across 100+ environments, Oracle EBS zero-day malware attacks, and FBI seizure of BreachForums domains tied to ShinyHunters.
- FBI seizes BreachForums amid ShinyHunters Salesforce extortion; Gladinet CentreStack zero-day CVE-2025-11371 and Oracle EBS zero-day attacks actively exploited.
- The Fortra GoAnywhere zero-day (CVE-2025-10035), Volvo supply chain ransomware theft, and Flo Health's $56M settlement with Google.
- Ransomware disrupting European airport check-ins including Heathrow, the Stellantis Salesforce data breach, and a CVSS 10 GoAnywhere MFT flaw.
- UNC1549 espionage against European telecoms, Turla and Gamaredon teaming up on Ukraine, and a CVSS 10.0 GoAnywhere MFT command injection patch.
- Iran-linked UNC1549 breaches European telecoms, Gamaredon and Turla team up on Ukraine, and ShinyHunters tied to healthcare breaches affecting 600K+ people.