Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2024-4040 exploited in the wild: everything you need to know

wiz.io | vulnerability | CVE-2024-4040 | #rce | #vulnerability | #patching | #exploited-in-the-wild | #crushftp | #cve-2024-4040

Summary

Wiz covers CVE-2024-4040, a critical CrushFTP sandbox escape scored 9.8 and exploited in the wild, escalating to unauthenticated RCE; patch guidance covers versions before 10.7.1 and 11.1.0.
Published
Collected

original ↗

Related coverage

  1. RCE vulnerability in OpenSSH: everything you need to know (wiz.io)
  2. Critical RCE vulnerability in PHP CGI: everything you need to know (wiz.io)
  3. CVE-2023-38545 high severity vulnerability in cURL: everything you need to know (wiz.io)
  4. Critical and high severity Exim vulnerabilities: everything you need to know (wiz.io)
  5. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  6. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)

back