nygazet.com logo
Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers
technology

Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers

1 min read

CrushFTP flaw CVE-2025-54309 exploited in wild, giving attackers admin access. Older builds before July 1 are at high risk

A newly disclosed critical security flaw in CrushFTP has come under active exploitation in the wild. Assigned the CVE identifier CVE-2025-54309, the vulnerability carries a CVSS score of 9.0. "CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when t... [3475 chars]

Read Original Article

View the original article

Visit Source

Share this article