Tag: File Transfer Server

The CrushFTP service has encountered a newly discovered critical vulnerability, already being exploited in active attacks. Designated CVE-2025-54309 and assigned a CVSS severity score of 9.0, the flaw stems from improper handling of AS2 validation. This oversight allows threat actors to gain administrative access to the server via HTTPS—provided that a DMZ proxy is not…