In the ever-evolving landscape of web application vulnerabilities, a new critical flaw has emerged. CVE-2025-2825 is a high-severity vulnerability that allows attackers to bypass authentication on CrushFTP servers. This popular enterprise file transfer solution is often used in corporate environments to manage sensitive data, making this vulnerability particularly concerning. Attackers are actively exploiting this flaw...

The post Exploited: Critical Unauthenticated Access Vulnerability in CrushFTP (CVE-2025-2825) appeared first on IONIX.

The post Exploited: Critical Unauthenticated Access Vulnerability in CrushFTP (CVE-2025-2825) appeared first on Security Boulevard.

Ohad Shushan

Source: Security Boulevard
Source Link: https://securityboulevard.com/2025/04/exploited-critical-unauthenticated-access-vulnerability-in-crushftp-cve-2025-2825/?utm_source=rss&utm_medium=rss&utm_campaign=exploited-critical-unauthenticated-access-vulnerability-in-crushftp-cve-2025-2825