securityaffairs
#CrushFTP zero-day actively exploited at least since July 18
https://securityaffairs.com/180244/hacking/crushftp-zero-day-actively-exploited-at-least-since-july-18.html
#securityaffairs #hacking
CrushFTP Zero-Day actively exploited at least since July 18

Hackers exploit CrushFTP zero-day, tracked as CVE-2025-54309, to gain admin access via HTTPS when DMZ proxy is off.

Security Affairs
Jul 22, 2025 at 10:32amWeb