A Zero-Day Vulnerability in CrushFTP Results in Server Compromise

Red | Vulnerability Report
Download PDFDownload PDF

Summary:

The discovery of an actively exploited zero-day vulnerability, CVE-2024-4040, in CrushFTP is concerning. This vulnerability allows unauthenticated attackers to bypass the user’s virtual file system (VFS) and access system files for download.

Threat Level – Red | Vulnerability Report

Reduce real exposure. Not just vulnerability volume.

Platform

Arbis AI

The HivePro Platform

Integrations

HiveForce Labs

Compare

vs Rapid7

vs Tenable

vs Qualys

vs Nucleus

Solutions

Attack Surface Mgmt

Multi-Env Scanners

Exposure Assessment

Security Intelligence

Threat Prioritization

Exposure Validation

By Role

CISO

Vulnerability Managers

Resources

Platform Resources

Blog

Learning Center

Nation-State Cyber Threats

Threat Advisories

Threat Digests

eBooks

Podcast — Threat Talks

Company

About Us

Our Leadership

Careers

Partner Program

Contact Us

Help Center

Book a Demo
© 2026 HivePro. All rights reserved.Privacy PolicyTerms & Conditions