---
id: 7170
title: "CVE-2024-4040 exploited in the wild: everything you need to know"
cve: CVE-2024-4040
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/crushftp-vfs-sandbox-vulnerability"
published_at: "2024-04-24T16:15:18Z"
tags: ["rce", "vulnerability", "patching", "exploited-in-the-wild", "crushftp", "cve-2024-4040"]
phying_url: "https://phying.com/item/7170"
lang: en
---

# CVE-2024-4040 exploited in the wild: everything you need to know

## Summary

Wiz covers CVE-2024-4040, a critical CrushFTP sandbox escape scored 9.8 and exploited in the wild, escalating to unauthenticated RCE; patch guidance covers versions before 10.7.1 and 11.1.0.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2024-4040
- **Published:** 2024-04-24T16:15:18Z
- **Original:** https://www.wiz.io/blog/crushftp-vfs-sandbox-vulnerability
- **Phying News:** https://phying.com/item/7170