CrushFTP
CVEs currently on EVULNABLE's Priority Feed for CrushFTP, and this vendor's own CISA KEV history.
In EVULNABLE's ranked feed
Showing all 3 CrushFTP CVEs in EVULNABLE's ranked feed.
#1 95 Immediate CVE-2025-31161 ExigentKEV since 2025 · listed over a yearRansomwareCISA KEV CrushFTP — CrushFTP Authentication Bypass Vulnerability KEV + ransomware, EPSS 99.9%
EVRS 95/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 87 Immediate CVE-2024-4040 ExigentKEV since 2024 · listed over a yearCISA KEV CrushFTP — CrushFTP VFS Sandbox Escape Vulnerability KEV, EPSS 99.5%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.995.
#3 87 Immediate CVE-2025-54309 ExigentKEV since 2025 · listed over a yearCISA KEV CrushFTP — CrushFTP Unprotected Alternate Channel Vulnerability KEV, EPSS 95.1%
EVRS 87/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.951.