{"uuid": "d1f98235-a119-4056-9fc3-88e4896af594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-54309", "type": "exploited", "source": "https://t.me/BleepingComputer/22564", "content": "\u200aCrushFTP zero-day exploited in attacks to gain admin access on servers\n\nCrushFTP is warning that threat actors are actively exploiting a zero-day vulnerability tracked as CVE-2025-54309, which allows attackers to gain administrative access via the web interface on vulnerable servers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/crushftp-zero-day-exploited-in-attacks-to-gain-admin-access-on-servers/", "creation_timestamp": "2025-07-18T22:50:27.000000Z"}