Hackers Exploit CrushFTP Zero-Day to Take Over Servers

Wait 5 sec.

WatchTowr Labs uncovers a zero-day exploit (CVE-2025-54309) in CrushFTP. The vulnerability lets hackers gain admin access via the…