CrushFTP
3 CVEs in CISA KEV — 1 with confirmed ransomware use
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2025-31161 |
CrushFTP | — | 0.9997 | 2025-04-07 | 2025-04-28 | RW | CrushFTP contains an authentication bypass vulnerability in the HTTP authorizati |
CVE-2024-4040 |
CrushFTP | — | 0.9954 | 2024-04-24 | 2024-05-01 | CrushFTP contains an unspecified sandbox escape vulnerability that allows a remo | |
CVE-2025-54309 |
CrushFTP | — | 0.9347 | 2025-07-22 | 2025-08-12 | CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ p |