netVigilance Vulnerability intelligence since 2004

CrushFTP

3 CrushFTP vulnerabilities with confirmed exploitation in the wild, as published by CISA; 3 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for CrushFTP
Vulnerability Status
overdue 394d2025-08-12 CVE-2025-54309 CrushFTP / CrushFTP CrushFTP Unprotected Alternate Channel Vulnerability 2025-07-22 9.8 past due
overdue 500d2025-04-28 CVE-2025-31161 CrushFTP / CrushFTP CrushFTP Authentication Bypass Vulnerability 2025-04-07 9.8 past dueransomware
overdue 862d2024-05-01 CVE-2024-4040 CrushFTP / CrushFTP CrushFTP VFS Sandbox Escape Vulnerability 2024-04-24 10.0 past due
3 records Open in catalog with filters →