GoAnywhere MFT 7.8: General Support Ends November 12, 2026, Partial Support May 12, 2027
Fortra ends General Support for GoAnywhere MFT 7.8 on November 12, 2026. Fortra's supported versions table lists MFT 7.8.x with a release date of April 24, 2025, a General Support End Date of November 12, 2026 and a Partial Support End Date of May 12, 2027. After that, 7.8 is End of Support Life. The dates matter more than usual for this product: GoAnywhere MFT is a file transfer server that CISA lists twice in its Known Exploited Vulnerabilities catalog, and both entries are marked as used in ransomware campaigns. Live status and EOL Risk Score are on the GoAnywhere MFT 7.8 page; every version Fortra has dated is on the GoAnywhere MFT page.
Key Dates at a Glance
- GoAnywhere MFT 7.9: General Support ends 2027-04-20; Partial Support ends 2027-10-20
- GoAnywhere MFT 7.8: General Support ends 2026-11-12; Partial Support ends 2027-05-12
The dates, as Fortra prints them
These rows come from the MFT section of Fortra's GoAnywhere Products Supported Versions and EOSL Dates table. Fortra's EOSL Start Date column is the day the next major version shipped, when a version's wind-down began; it is not an end date. GoAnywhere Gateway and GoAnywhere Agents have their own rows in the same table, with their own dates.
| Version | Current support level | Release Date | General Support End Date | Partial Support End Date |
|---|---|---|---|---|
| MFT 7.10.x | Full | April 20, 2026 | TBD | TBD |
| MFT 7.9.x | General | November 12, 2025 | April 20, 2027 | October 20, 2027 |
| MFT 7.8.x | General | April 24, 2025 | November 12, 2026 | May 12, 2027 |
| MFT 7.7.x and prior | EOSL | EOSL in every column. Fortra's footnote says that for security reasons, versions prior to 7.7.x are End of Support Life. | ||
The 7.8 dates follow Fortra's pattern: General Support ends twelve months after the next major version (7.9, released November 12, 2025) shipped, and Partial Support runs six months beyond that.
What General Support and Partial Support mean
Fortra's GoAnywhere End of Support Life Policy defines four states. All of them require a paid Maintenance Services plan, and only customers with current maintenance can download patch releases.
| Fortra's level | What Fortra provides | GoAnywhere MFT 7.8 |
|---|---|---|
| Full Support | For the latest Major Release: support questions, help reproducing issues, escalation to development, and patches and updates. | Ended when 7.9 was released |
| General Support | Usually about twelve months. The support process stays the same, but patches or updates are only applied to the latest Major Release in Full Support; upgrading may be necessary to correct a reported problem. | Until November 12, 2026 |
| Partial Support | About six months of limited support: known workarounds, existing patch releases and Knowledge Base access. Fortra staff do not reproduce cases or escalate them to engineering. Fortra can shorten this period, for example when a critical security vulnerability is found in a version. | Until May 12, 2027 |
| End of Support Life (EOSL) | No longer supported; any assistance is best effort, and Fortra strongly recommends upgrading as soon as possible. | After May 12, 2027 |
The practical reading: on November 12 a 7.8 server does not lose patches, because under the policy it stopped getting new ones when 7.9 arrived. What it loses is Fortra's full case process: after that date a support engineer can point to a known workaround or an existing patch release, but will not reproduce a new problem or take it to engineering. Fortra's supported versions page adds that customers with an active Maintenance and Support Plan can update to the next version for free.
Why the dates matter: two KEV entries
CISA's Known Exploited Vulnerabilities catalog lists two GoAnywhere MFT flaws, both in how the server handles license responses, and both marked by CISA as known to be used in ransomware campaigns:
- CVE-2023-0669, a pre-authentication remote code execution flaw in the License Response Servlet, added to the catalog on February 10, 2023.
- CVE-2025-10035, a deserialization flaw in the License Servlet, added on September 29, 2025. Fortra's advisory FI-2025-012 rated it Critical and named two patched versions, 7.8.4 and the Sustain Release 7.6.3, and told customers to make sure the GoAnywhere Admin Console is not open to the public.
A 7.8 server on 7.8.4 or later has the fix for CVE-2025-10035. The risk is the next flaw: under the policy, a fix for it goes to the release in Full Support, and Fortra may shorten Partial Support for a version with a critical vulnerability. A file transfer server facing the internet should not wait for May 2027.
Where to move
Fortra's footnote recommends installing or upgrading to GoAnywhere MFT 7.10.0 or newer "to take advantage of our latest security patches". Version 7.10 is the only MFT line in Full Support, released April 20, 2026, with its end dates printed as TBD. Moving to 7.9 instead buys less: 7.9 is already in General Support, and its General Support ends April 20, 2027.
Fortra also runs a Security Sustain Release track, a long-term path that receives only updates for high or critical security vulnerabilities and production-down bugs, supported for at least twelve months from the release of the major version it is based on. Its current Sustain release is on the 7.10 line. Fortra asks customers to read the version history and upgrade instructions in the Customer Portal before upgrading.
What to do
- Check the version on every GoAnywhere MFT server: anything before 7.7 is already End of Support Life.
- On 7.8, confirm you are at 7.8.4 or later for the CVE-2025-10035 fix, and keep the Admin Console off the public internet, as Fortra's advisory says.
- Schedule the upgrade to 7.10 before November 12, 2026 if you want Fortra's full case process for any problem the upgrade raises.
- Do not plan around May 2027: Partial Support is workarounds and existing patches only, and Fortra can cut it short.
- Check Gateway and Agents too: they have their own rows and dates in Fortra's table. The GoAnywhere MFT page re-reads Fortra's MFT rows, and the EOL Checker answers for a single version.
Frequently Asked Questions
When does GoAnywhere MFT 7.8 reach end of support?
Fortra's supported versions table gives GoAnywhere MFT 7.8.x a General Support End Date of November 12, 2026 and a Partial Support End Date of May 12, 2027. After Partial Support, the version is End of Support Life (EOSL): Fortra no longer supports it, and any assistance is best effort.
Does GoAnywhere MFT 7.8 still get patches?
Fortra's End of Support Life Policy says that during General Support, patches or updates are only applied to the latest Major Release in Full Support, and that upgrading may be necessary to correct a reported problem. GoAnywhere MFT 7.8 entered General Support when 7.9 was released. During Partial Support, Fortra's engineers provide known workarounds and existing patch releases only.
Is GoAnywhere MFT in the CISA KEV catalog?
Yes. CISA's Known Exploited Vulnerabilities catalog lists two GoAnywhere MFT flaws, CVE-2023-0669 and CVE-2025-10035, both deserialization flaws in the license response handling and both marked as known to be used in ransomware campaigns. Fortra's advisory FI-2025-012 named 7.8.4 and the Sustain Release 7.6.3 as the patched versions for CVE-2025-10035.
Which GoAnywhere MFT version should I upgrade to?
Fortra's supported versions page recommends installing or upgrading to GoAnywhere MFT 7.10.0 or newer. Version 7.10 is the only MFT line in Full Support, with its end dates printed as TBD. Fortra says customers with an active Maintenance and Support Plan can update to the next version for free.
Related
- Fortra GoAnywhere MFT — every version Fortra has dated, live status and EOL Risk Score
- MOVEit Transfer 2025.1 leaves Active Support — another exploited file transfer product's November 2026 date
- WS_FTP Server 9.0 support dates — Progress's file transfer server lifecycle
- CrushFTP — version dates for another file transfer server
- Extended support vendors — how support past a vendor's date works