CrushFTP
In 5 briefs, most recently 4 March 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
3 CrushFTP vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 1 of them used in ransomware campaigns. Most recent:
- CVE-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability
- CVE-2025-31161 CrushFTP Authentication Bypass Vulnerability
- CVE-2024-4040 CrushFTP VFS Sandbox Escape Vulnerability
Coverage in DanSec Daily
- Drone strikes hit AWS data centers in UAE and Bahrain, AkzoNobel and LexisNexis breaches, and VMware Aria flaw CVE-2026-22719 exploited in the wild.
- Dell confirms World Leaks breach of its test lab and CrushFTP zero-day exposes 1,000+ servers; also SharePoint ToolShell zero-days hit US agencies, plus Dior …
- SharePoint zero-days (CVE-2025-53770/53771) breached 75+ servers, 3,500 sites ran stealth crypto miners, and npm packages were trojanized via phishing.
- NCSC attributes Microsoft 365 Authentic Antics malware to APT28, CrushFTP zero-day hijacks servers, and Google sues BADBOX 2.0 botnet operators.
- ClipBanker malware spread via SourceForge, Everest ransomware leak site hacked, and CrushFTP flaw added to CISA KEV catalog.