CrushFTP has issued a caution regarding an active zero-day vulnerability, designated as CVE-2025-54309, which threat actors are currently exploiting.
This flaw grants attackers administrative access to vulnerable servers through their web interface. Although the initial detection of threat actors leveraging this vulnerability occurred on July 18th at 9AM CST, it is conceivable that the activity commenced during the early hours of the preceding day.