#crushftp-cve-2025-54309-rce-zero-day-file-transfer-security-infosec-vulnerability

May 14, 2026 · 8 min read · 203 views

Detecting Exploitation of CrushFTP Vulnerability (CVE-2025-31161) With PacketSmith Yara Detection Module - Using track_state and flow_state

Introduction This vulnerability was found by Outpost24 under the identifier CVE-2025-31161 (previously reported as CVE-2025-2825). Outpost24 and other vendors and security researchers have shared enou

8 min read · 203 views