ZeusQA
Start free

Known exploited vulnerabilities

CrushFTP vulnerabilities attackers have used

Every CrushFTP vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 CrushFTP vulnerabilities as exploited in the wild, 0 of them added in the last 12 months and 1 used in ransomware campaigns. The most recent is CVE-2025-54309, added Jul 22, 2025. CrushFTP has the most entries (3).

In KEV, all time
3
Added, last 12 months
0
Used in ransomware
1
New CVEs this week
0

Every CrushFTP entry in CISA KEV

  1. CVE-2025-54309

    Added · due

    CrushFTP Unprotected Alternate Channel Vulnerability

    CrushFTP contains an unprotected alternate channel vulnerability. When the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS.

  2. CVE-2025-31161

    RansomwareAdded · due

    CrushFTP Authentication Bypass Vulnerability

    CrushFTP contains an authentication bypass vulnerability in the HTTP authorization header that allows a remote unauthenticated attacker to authenticate to any known or guessable user account (e.g., crushadmin), potentially leading to a…

  3. CVE-2024-4040

    Added · due

    CrushFTP VFS Sandbox Escape Vulnerability

    CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS).

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works