Security News Exploit for CrushFTP RCE chain released, patch now BleepingComputer Daniel Bender Nov 18, 2023 A proof-of-concept exploit was publicly released for a critical remote code execution vulnerability in the CrushFTP enterprise suite, allowing unauthenticated attackers to access files on the server, execute code, and obtain plain-text passwords.