{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CrushFTP vulnerabilities","home_page_url":"https://patchfirst.co/vendor/crushftp/","feed_url":"https://patchfirst.co/feed/vendor/crushftp.json","description":"New and newly exploited CrushFTP CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-54309#kev","url":"https://patchfirst.co/cve/CVE-2025-54309/","title":"[KEV] CVE-2025-54309: CrushFTP Unprotected Alternate Channel Vulnerability","content_text":"CrushFTP · CrushFTP. In CISA KEV since 2025-07-22. ENISA EUVD lists it as exploited. EPSS 93.5% (higher than 99.84% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1567 Exfiltration Over Web Service; T1021 Remote Services. Priority 69.8 of 100.","summary":"CrushFTP Unprotected Alternate Channel Vulnerability","date_published":"2025-07-22T00:00:00.000Z","date_modified":"2026-06-17T09:39:49.000Z","tags":["kev","public-exploit","T1068","T1567","T1021"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2025-07-22","ransomware":false},"epss":{"score":0.93473,"percentile":0.99839},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"CrushFTP","product":"CrushFTP","techniqueIds":["T1068","T1567","T1021"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-32102","url":"https://patchfirst.co/cve/CVE-2025-32102/","title":"CVE-2025-32102: CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows SSRF via the host and port parameters in a…","content_text":"CrushFTP · CrushFTP. Not in CISA KEV. EPSS 9.4% (higher than 95.4% of CVEs). CVSS 5.0 MEDIUM. Public exploit code exists. Priority 62.6 of 100.","summary":"CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows SSRF via the host and port parameters in a…","date_published":"2025-04-15T00:00:00.000Z","date_modified":"2025-11-03T19:53:19.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":62.6,"kev":null,"epss":{"score":0.09411,"percentile":0.95405},"cvss":{"score":5,"severity":"MEDIUM","version":"3.1"},"vendor":"CrushFTP","product":"CrushFTP","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-31161#kev","url":"https://patchfirst.co/cve/CVE-2025-31161/","title":"[KEV] CVE-2025-31161: CrushFTP Authentication Bypass Vulnerability","content_text":"CrushFTP · CrushFTP. In CISA KEV since 2025-04-07, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1136 Create Account. Priority 79.9 of 100.","summary":"CrushFTP Authentication Bypass Vulnerability","date_published":"2025-04-07T00:00:00.000Z","date_modified":"2026-06-17T09:09:56.000Z","tags":["kev","ransomware","public-exploit","T1078","T1059","T1136"],"_patchfirst":{"reason":"kev","priority":79.9,"kev":{"dateAdded":"2025-04-07","ransomware":true},"epss":{"score":0.99969,"percentile":0.99977},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"CrushFTP","product":"CrushFTP","techniqueIds":["T1078","T1059","T1136"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-4040#kev","url":"https://patchfirst.co/cve/CVE-2024-4040/","title":"[KEV] CVE-2024-4040: CrushFTP VFS Sandbox Escape Vulnerability","content_text":"CrushFTP · CrushFTP. In CISA KEV since 2024-04-24. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.95% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1059 Command and Scripting Interpreter. Priority 80.0 of 100.","summary":"CrushFTP VFS Sandbox Escape Vulnerability","date_published":"2024-04-24T00:00:00.000Z","date_modified":"2026-06-17T08:00:59.000Z","tags":["kev","public-exploit","T1190","T1005","T1059"],"_patchfirst":{"reason":"kev","priority":80,"kev":{"dateAdded":"2024-04-24","ransomware":false},"epss":{"score":0.99539,"percentile":0.99946},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"CrushFTP","product":"CrushFTP","techniqueIds":["T1190","T1005","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}