CrushFTP

3 known vulnerabilities in CrushFTP, 3 critical, 3 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2025-54309 CVSS 9.8 critical · actively exploited CrushFTP Unprotected Alternate Channel Vulnerability
  • CVE-2025-31161 CVSS 9.8 critical · actively exploited CrushFTP Authentication Bypass Vulnerability
  • CVE-2024-4040 CVSS 10.0 critical · actively exploited CrushFTP VFS Sandbox Escape Vulnerability

Latest vulnerabilities

  • CVE-2025-54309 CVSS 9.8 critical · actively exploited CrushFTP Unprotected Alternate Channel Vulnerability
  • CVE-2025-31161 CVSS 9.8 critical · actively exploited CrushFTP Authentication Bypass Vulnerability
  • CVE-2024-4040 CVSS 10.0 critical · actively exploited CrushFTP VFS Sandbox Escape Vulnerability