Skip to content
Threat Feed
Subscribe

Product

CrushFTP (< 7.3.0)

1 brief RSS
critical advisory

CrushFTP: Authentication bypass and administrative account creation (CVE-2025-54309)

CVE-2025-54309 is an authentication bypass vulnerability in CrushFTP allowing unauthenticated administrative account creation via manipulation of the AS2-To header.

CrushFTP +2 authentication-bypass web-exploitation
1r 4t 2c updated