Search

CrushFTP Bruteforce Attacks Target Known Vulnerabilities

Published March 3, 2026
CVE-2025-54309
High Active CVE

What Is This?

Attackers are conducting bruteforce scans against CrushFTP systems targeting multiple serious vulnerabilities including template injection and authentication bypass flaws. The July 2025 zero-day CVE-2025-54309 was actively exploited.

Affected Systems

CrushFTP