Fortra Discloses Critical Auth Bypass Vuln in GoAnywhere MFT

A critical authentication-bypass vulnerability (CVE-2024-0204) affecting Fortra GoAnywhere MFT was disclosed and a proof-of-concept exploit published by Horizon3.ai; the flaw allows unauthenticated attackers to create admin accounts, is trivial to scan for and exploit, and remains largely unpatched (Tenable telemetry shows <4% of assets updated), raising high risk of mass exploitation similar to prior Cl0p attacks on GoAnywhere.