Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers

CrushFTP flaw CVE-2025-54309 exploited in wild, giving attackers admin access. Older builds before July 1 are at high risk
More info