Crushftp

CrushFTP is a file-transfer server product that, despite a narrow product portfolio, ranks among the more prominent vendors in the vulnerability landscape and presents a focused but critical attack surface for organizations deploying it. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes, have an elevated tendency toward confirmed in-the-wild exploitation, and frequently acquire public exploit code; the recurring weakness classes—including cross-site scripting, open redirects, authentication bypass, unsafe deserialization, and improper code-resource management—reflect the web-accessible and dynamic-code demands of an FTP-server platform. Defenders should treat CrushFTP advisories as high-priority and prioritize patching, particularly for internet-exposed instances; live severity, exploitation, and exposure counts are shown alongside this summary.