Back

Outpost24 Puts Up A Blog Post On The CrushFTP Authentication Bypass Vulnerability… And The Events That Led To Mass Attacks

Outpost24 analysts recently discovered a critical authentication bypass vulnerability in CrushFTP, identified as CVE-2025-31161. Today, the team posted a blog detailing the process of their reporting, including how other parties circulating this news under a different CVE caused media confusion. The vulnerability is now being exploited by remote…

https://itnerd.blog/2025/04/02/outpost24-puts-up-a-blog-post-on-the-crushftp-authentication-bypass-vulnerability-and-the-events-that-led-to-mass-attacks/