CVE-2023-0669

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 20, 2026 12 articles

VulnLookup ↗ NVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

94.38%

probability

This CVE has a 94.38% probability of being exploited in the next 30 days.

0% Top 100.0th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Attack Intelligence

CWE-502 · Deserialization of Untrusted Data CWE-664 · Improper Control of a Resource Through its Lifetime CWE-913 · Improper Control of Dynamically-Managed Code Resources

Exploits & PoC

Avento/CVE-2023-0669

GoAnywhere MFT CVE-2023-0669 LicenseResponseServlet Deserialization Vulnerabilities Python RCE PoC(Proof of Concept)

1 repo — triés par ⭐ Rechercher sur GitHub ↗

2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is

Qualys Dec 19, 2023

Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks

TheHackerNews

Fortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT Vulnerability

TheHackerNews

U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog

TheHackerNews

Inside LockBit: Defense Lessons from the Leaked LockBit Negotiations

Qualys May 08, 2025

Hatch Bank discloses data breach after GoAnywhere MFT hack

BleepingComputer Mar 02, 2023

Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin

TheHackerNews

CISA Warns of Active Attacks Exploiting Fortra MFT, TerraMaster NAS, and Intel Driver Flaws

TheHackerNews

Fortra shares findings on GoAnywhere MFT zero-day attacks

BleepingComputer Apr 19, 2023

Hitachi Energy confirms data breach after Clop GoAnywhere attacks

BleepingComputer Mar 17, 2023

Forta GoAnywhere Zero-Day Exploited By Threat Actors

Qualys Feb 15, 2023

Clop ransomware claims Saks Fifth Avenue, retailer says mock data stolen

BleepingComputer Mar 21, 2023

Signal Intelligence

Confidenceⓘ

92%

EPSS 94.38%

Mentions 12

Last Seen May 08, 2025

CNA Information

Analyst Note

CVE-2023-0669 is explicitly identified as a zero-day RCE vulnerability in Fortra's GoAnywhere MFT tool with active ransomware exploitation documented. TheHackerNews article directly states 'zero-day remote code execution (RCE) vulnerability' and 'active exploitation by ransomware actors,' confirming exploitation in the wild prior to or concurrent with patch availability.