https://patchfirst.co/vendor/crushftp/New and newly exploited CrushFTP CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2025-54309/CVE-2025-54309#kevTue, 22 Jul 2025 00:00:00 GMTCrushFTP · CrushFTP. In CISA KEV since 2025-07-22. ENISA EUVD lists it as exploited. EPSS 93.5% (higher than 99.84% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1567 Exfiltration Over Web Service; T1021 Remote Services. Priority 69.8 of 100.kevpublic-exploitT1068T1567T1021https://patchfirst.co/cve/CVE-2025-32102/CVE-2025-32102Tue, 15 Apr 2025 00:00:00 GMTCrushFTP · CrushFTP. Not in CISA KEV. EPSS 9.4% (higher than 95.4% of CVEs). CVSS 5.0 MEDIUM. Public exploit code exists. Priority 62.6 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-31161/CVE-2025-31161#kevMon, 07 Apr 2025 00:00:00 GMTCrushFTP · CrushFTP. In CISA KEV since 2025-04-07, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1136 Create Account. Priority 79.9 of 100.kevransomwarepublic-exploitT1078T1059T1136https://patchfirst.co/cve/CVE-2024-4040/CVE-2024-4040#kevWed, 24 Apr 2024 00:00:00 GMTCrushFTP · CrushFTP. In CISA KEV since 2024-04-24. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.95% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1059 Command and Scripting Interpreter. Priority 80.0 of 100.kevpublic-exploitT1190T1005T1059