{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:35.347Z","products":["fortra"],"actNowTotal":0,"results":[{"query":"fortra","matched":1,"actNow":0,"events":[{"id":"early-cve-2024-0204","url":"https://securitythreatpulse.com/events/early-cve-2024-0204","title":"Fortra GoAnywhere MFT: attackers can get in without a password","verdict":"watch","verdictReason":"Attack attempts are confirmed, with no confirmed exploitation yet.","tier":null,"rankScore":4,"rankWhy":["The product faces the internet or gives remote access.","Ready-made attack tools are public.","The first report is 20 days old."],"rulesVersion":"v3","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"none"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2024-0204"],"vendor":"Fortra","product":"GoAnywhere MFT","affectedProducts":[{"kind":"direct","slug":"fortra/goanywheremft","vendor":"Fortra","product":"GoAnywhere MFT","evidence":["cna","cpe"],"vendorKey":"fortra","productKey":"goanywheremft"}],"category":{"id":"file-transfer","label":"File transfer","why":"It holds files you swap with customers and partners, a common target for bulk data theft.","doThis":"Patch it today and check it for files or accounts you do not recognize."},"summary":"Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.","cvss":9.8,"epss":0.95086,"exploitMaturity":"weaponized","kevListed":false,"kevDateAdded":null,"kevDueDate":null,"firstSeenAt":"2026-10-22T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-10-24T23:23:07.970Z"}]}]}