CrushFTP: exploited vulnerabilities
- 3exploited vulnerabilities
- 1used by ransomware
- Jul 22, 2025latest one added
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Jul 22, 2025 | CrushFTP Unprotected Alternate Channel | CrushFTP | Critical 9.0 | 93% |
| Apr 7, 2025 | Authentication Bypass | CrushFTP | Critical 9.8 | >99.9% |
| Apr 24, 2024 | VFS Sandbox Escape | CrushFTP | Critical 9.8 | 99.5% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.