CVE-2024-4040: CrushFTP VFS Sandbox Escape Vulnerability
CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS).
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-4040CrushFTP
- Related
- CVE-2025-54309: CrushFTP Unprotected Alternate Channel Vulnerability Known Exploited Vulnerabilities · Jul 22, 2025CVE-2025-31161: CrushFTP Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Apr 07, 2025Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026