Do Son A Critical (CVSS 10.0) zero-day RCE flaw (CVE-2025-10035) in GoAnywhere MFT is being actively exploited by the Medusa ransomware group, Storm-1175. Patch immediately.
GoAnywhere MFT
CVE-2023-0669 is described as a remote code injection that requires access to the administrative console of the application.