CVE-2025-31161

CVSS

—

EPSS

1.000 (100.0th percentile)

CISA KEV

Added 2025-04-07, due 2025-04-28

Exploitation

No report

Public exploits

20 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 100Huntress04 Apr 2025, 05:00

  CrushFTP CVE-2025-31161 Auth Bypass and Post-Exploitation

  Huntress observed in-the-wild exploitation of CVE-2025-31161, an authentication bypass vulnerability in versions of CrushFTP and further post-exploitation leveraging MeshCentral and other malware.

  ↗huntress.com/blog/crushftp-cve-2025-31161-auth-…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:44poc publishedpoc-in-github
2. 24 Sept, 12:22poc publishedpoc-in-github
3. 24 Sept, 11:59poc publishedpoc-in-github
4. 24 Sept, 11:50kev addedcisa-kev