On July 18, CrushFTP warned that a zero-day in its CrushFTP software was being exploited in the wild.

According to CrushFTP, the vulnerability was first discovered as being exploited on July 18 at 9AM CST, though they caution that exploitation may have “been going on for longer.”

For more information about the vulnerability, including the availability of patches and Tenable product coverage, please visit our blog.