sign in--:--:--UTC

CVE-2025-31161

exploited in the wild☆ pin

CVSS

9.8

Reports

3

First seen

Apr 4, 2025

Last seen

May 6, 2025

Affected product

CrushFTP

Recent reports

Consistent Threat Actor TTPs Across CrushFTP and Gladinet CentreStack Exploitations

Huntress BlogMay 6, 2025 Critical

CVE-2025-30406: Critical RCE in Gladinet CentreStack & Triofox Actively Exploited

Huntress BlogApr 14, 2025 Critical

CrushFTP CVE-2025-31161 Authentication Bypass and Post-Exploitation Analysis

Huntress BlogApr 4, 2025

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans