CrushFTP Exploitation Continues Amid Disclosure Dispute
ID: 161e7011-93ec-52a6-9541-a87820ff3aeb
STIX ID: report--161e7011-93ec-52a6-9541-a87820ff3aeb
Feed Name: Dark Reading
Threat Score
The report documents active exploitation of a critical authentication-bypass vulnerability in CrushFTP (CVE-2025-31161), observed against multiple hosts and industries, and describes a contentious CVE disclosure dispute that complicated coordinated response; vendors and CISA have flagged the issue and customers are urged to update to CrushFTP 11.3.1+ or 10.8.4+, or apply recommended workarounds.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.