Security News Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers TheHackerNews Daniel Bender Jul 20, 2025 CrushFTP flaw CVE-2025-54309 exploited in wild, giving attackers admin access. Older builds before July 1 are at high risk