# cve.now: CrushFTP

The newest entries naming CrushFTP as an affected vendor (up to 200), of 7 in all, 3 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2015-20129](https://cve.now/CVE-2015-20129.md): CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/ (CVSS 8.6)
- [CVE-2025-54309](https://cve.now/CVE-2025-54309.md): CrushFTP 10 before 10.8.5 and 11 before 11.3.4\_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows (CVSS 9.0, KEV)
- [CVE-2025-32103](https://cve.now/CVE-2025-32103.md): CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files ac (CVSS 5.0)
- [CVE-2025-32102](https://cve.now/CVE-2025-32102.md): CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows SSRF via the host and port parameters in a command=telnetSocket request (CVSS 5.0)
- [CVE-2025-31161](https://cve.now/CVE-2025-31161.md): CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account (unless a DMZ proxy… (CVSS 9.8, KEV)
- [CVE-2024-11986](https://cve.now/CVE-2024-11986.md): Stored XSS in CrushFTP (CVSS 9.6)
- [CVE-2024-4040](https://cve.now/CVE-2024-4040.md): Unauthenticated arbitrary file read and remote code execution in CrushFTP (CVSS 9.8, KEV)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/crushftp
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.