Exploit for Authentication Bypass by Primary Weakness in Crushftp

🗓️ 11 Jan 2026 12:59:28Reported by DairrowType

githubexploit

githubexploit🔗 github.com👁 171 Views

CVE-2025-31161 enables remote unauthenticated bypass in CrushFTP, allowing user impersonation and actions on behalf of others.

Reporter	Title	Published	Views	Family All 45
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	21 Oct 202517:49	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	20 Feb 202613:40	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	6 Jun 202509:14	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	8 Apr 202515:37	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	10 Sep 202500:20	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	21 Apr 202523:57	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	23 May 202521:04	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	29 Oct 202523:17	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	29 Jun 202620:41	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	29 Jun 202620:51	–	githubexploit

11 Jan 2026 13:09Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

EPSS0.99947

crushftp authentication bypass remote exploit versions affected 10.0 10.8.3 versions affected 11.0 11.3.0 patched in 10.8.4 11.3.1