Login Request a demo
CR
Product
CrushFTP
by CrushFTP · last CVE Oct 28, 2026
On CISA KEVExploited in the wildRansomware-linked
18
CVEs
3
On KEV
10.0
Max CVSS
1
New 30D
Vulnerabilities18In the news1Timeline
Severity mix
Critical 6High 1Medium 11Low 0
Severity
All severities18Critical6High1Medium11Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add CrushFTP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-4040
In wildKEV
10.0
100%
Apr 22
Unauthenticated arbitrary file read and remote code execution in CrushFTP
Affected: 10.0 before 10.7.1; 11.0 before 11.1.0
CVE-2025-54309
In wildKEV
9.8
93%
Jul 18
CrushFTP Unprotected Alternate Channel Vulnerability
Affected: 10 before 10.8.5; 11 before 11.3.4_23
CVE-2025-31161
RansomwareIn wildKEV
9.8
100%
Apr 3
CrushFTP Authentication Bypass Vulnerability
Affected: 10 before 10.8.4; 11 before 11.3.1
Showing 3