crushftp
Safeguard articles tagged "crushftp" — guides, analysis, and best practices for software supply chain and application security.
4 articles
CVE-2024-4040: CrushFTP VFS Sandbox Escape Vulnerability
CVE-2024-4040 affects CrushFTP CrushFTP and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-04-24.
CVE-2025-31161: CrushFTP Authentication Bypass Vulnerability
CVE-2025-31161 affects CrushFTP CrushFTP and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-04-07.
CVE-2025-54309: CrushFTP Unprotected Alternate Channel Vulnerability
CVE-2025-54309 affects CrushFTP CrushFTP and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-07-22.
CrushFTP CVE-2025-31161: Authentication Bypass Exploited in the Wild
A critical authentication bypass in CrushFTP allowed unauthenticated access to file transfer servers. Exploitation was observed within days of disclosure, targeting multiple industries.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.