Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 30 added in the last 30 days, latest on Nov 6, 2026.
3 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Jul 22, 2025 | CVE-2025-54309 | CrushFTP · CrushFTP | CrushFTP Unprotected Alternate Channel Vulnerability | Critical 9.0 | 93.5% | Aug 12, 2025 |
| Apr 7, 2025 | CVE-2025-31161 Ransomware | CrushFTP · CrushFTP | CrushFTP Authentication Bypass Vulnerability | Critical 9.8 | 100.0% | Apr 28, 2025 |
| Apr 24, 2024 | CVE-2024-4040 | CrushFTP · CrushFTP | CrushFTP VFS Sandbox Escape Vulnerability | Critical 9.8 | 99.5% | May 1, 2024 |