CrushFTP Vulnerability Exploited in Wild to Execute Remote Code

A critical vulnerability in CrushFTP, identified as CVE-2024-4040, has been actively exploited in the wild. It allows attackers to perform unauthenticated remote code execution on vulnerable servers. This severe security flaw affects versions of CrushFTP before 10.7.1 and 11.1.0, enabling attackers to bypass the Virtual File System (VFS) sandbox, gain administrative privileges, and potentially access […]

The post CrushFTP Vulnerability Exploited in Wild to Execute Remote Code appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News …

actively exploited attackers bypass code code execution critical critical vulnerability crushftp cve cve-2024 cve-2024-4040 cyber security execute remote code exploited file file system flaw in the wild remote code remote code execution sandbox security security flaw servers system unauthenticated virtual virtual file system vulnerability vulnerability exploited vulnerable