https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:37:53.324837+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-00833 bdu:2023-00833 2026-10-04T17:37:53.327782+00:00 bdu:2023-00833 https://cve.radiocsirt.org/vuln/euvd-2026-348812 EUVD-2026-348812 2026-10-04T17:37:53.327814+00:00 EUVD-2026-348812 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0669 fkie_cve-2023-0669 2026-10-04T17:37:53.327829+00:00

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

 https://cve.radiocsirt.org/vuln/ghsa-6pm2-j2v8-h3cj Withdrawn: GHSA-6pm2-j2v8-h3cj — Withdrawn: Fortra GoAnywhere MFT Deserialization of Untrusted Data vulnerability affects metasploit-framework 2026-10-04T17:37:53.327857+00:00

Withdrawn by the publisher.

Affected: RubyGems: metasploit-framework

## Withdrawn This advisory has been withdrawn because it was incorrectly associated with the metasploit-framework package, which is not affected by this CVE, and the actual vulnerable component does not fit within our supported ecosystems. This link is maintained to preserve external references.

## Original Description

Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object.

 https://cve.radiocsirt.org/vuln/gsd-2023-0669 gsd-2023-0669 2026-10-04T17:37:53.327883+00:00 gsd-2023-0669