crushftp
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 37 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 30, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/
Detecting Exploitation of CrushFTP Vulnerability (CVE-2025-31161) With PacketSmith Yara Detection Module - Using track_state and flow_state
Detecting Exploitation of CrushFTP Vulnerability (CVE-2025-31161) With PacketSmith Yara Detection Module - Using track_state and flow_state
The One Where We Just Steal The Vulnerabilities (CrushFTP CVE-2025-54309) - watchTowr Labs
New Critical CrushFTP CVE-2025-54309 RCE Explained + PoC
Over 1,000 CrushFTP servers exposed to ongoing hijack attacks
CrushFTP zero-day exploited to gain admin access on servers
CrushFTP zero-day exploited in attacks to gain admin access on servers
Monitor crushftp in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.