Security News Maximum severity GoAnywhere MFT flaw exploited as zero day BleepingComputer Daniel Bender 26 Sep 2025 Hackers are actively exploiting a maximum severity vulnerability (CVE-2025-10035) in Fortra's GoAnywhere MFT that allows injecting commands remotely without authentication.