Cyberdudebivash

        GoAnywhere MFT HACKED: Deserialization Flaw in License Servlet Gives Unauthenticated Attackers Total Control     By CyberDudeBivash • September 28, 2025, 12:21 AM IST • Threat Intelligence Report   The digital supply chain is under assault again. A critical, unauthenticated Java deserialization vulnerability has been discovered in Fortra's GoAnywhere MFT solution, a mission-critical platform for thousands of enterprises. The flaw resides in a public-facing, pre-authentication endpoint—the License Request Servlet—and allows a remote attacker to achieve full Remote Code Execution (RCE) with a single, specially crafted request. This is not a minor bug; it is a full system takeover vulnerability that bypasses all authentication. For any organization using GoAnywhere MFT, this is an all-hands-on-deck crisis. This deep-dive technical report will dissect the vulnerability, detail the attacker's kill chain, and provide an immediate action p...