https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:54:26.884861+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-03173 bdu:2024-03173 2026-10-02T14:54:26.888652+00:00 bdu:2024-03173 https://cve.radiocsirt.org/vuln/euvd-2026-255646 EUVD-2026-255646 2026-10-02T14:54:26.888683+00:00 EUVD-2026-255646 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4040 fkie_cve-2024-4040 2026-10-02T14:54:26.888698+00:00

A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform remote code execution on the server.

 https://cve.radiocsirt.org/vuln/ghsa-46vf-c8gj-2pgq GHSA-46vf-c8gj-2pgq 2026-10-02T14:54:26.888728+00:00

VFS Sandbox Escape in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows remote attackers with low privileges to read files from the filesystem outside of VFS Sandbox.

 https://cve.radiocsirt.org/vuln/gsd-2024-4040 gsd-2024-4040 2026-10-02T14:54:26.888744+00:00 gsd-2024-4040 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0944 WID-SEC-W-2024-0944 — CrushFTP: Schwachstelle ermöglicht Codeausführung mit administrativen Rechten 2026-10-02T14:54:26.888755+00:00

Ein entfernter Angreifer kann eine Schwachstelle in CrushFTP ausnutzen, um Code mit administrativen Rechten auszuführen