This release includes two new Rapid Response risks for ASM and a new software fingerprint for all datasets. ## Rapid Response The Censys Rapid Response team published information about and queries for the following issues and vulnerabilities. * [Unauthenticated Auth Bypass Vulnerability in CrushFTP CVE-2025-31161](https://censys.com/advisory/cve-2025-31161) * Use the following queries to find CrushFTP services. Not all of these are necessarily vulnerable, as specific version information may not be available. * [Platform query](https://platform.censys.io/search?q=host.services.software%3A+%28vendor%3A%22CrushFTP%22+and+product%3A+%7B%22CrushFTP%22%2C+%22CrushFTP+Web+Interface%22%7D%29) * [Legacy Search query](https://search.censys.io/search?resource=hosts\&sort=RELEVANCE\&per_page=25\&virtual_hosts=EXCLUDE\&q=services.software%3A+%28vendor%3D%22CrushFTP%22+and+product%3A+%7B%22CrushFTP%22%2C+%22CrushFTP+Web+Interface%22%7D%29) * [ASM query](https://app.censys.io/inventory?query=host.services.software%3A%20\(vendor%3D%22CrushFTP%22%20and%20product%3A%20%7B%22CrushFTP%22%2C%20%22CrushFTP%20Web%20Interface%22%7D\)\&pageSize=100\&tab=all\&columns=type_id_risks_source_tags_associationDate_cloud_expirationDate_accountId\&ref=sb) * [ASM risk query](https://app.censys.io/inventory?query=risks.name%20%3D%20%22Vulnerable%20CrushFTP%20%5BCVE-2025-2825%2C%20CVE-2025-31161%5D%22\&pageSize=100\&tab=all\&columns=type_id_risks_source_tags_associationDate_cloud_expirationDate_accountId\&ref=sb) * This query can be used to identify exposed instances of CrushFTP that are vulnerable to the exploit. * [Unauthenticated RCE Vulnerability in Ivanti Connect & Policy Secure and ZTA Gateway CVE-2025-22457](https://censys.com/advisory/cve-2025-22457) * Use the following queries to find Ivanti Connect Secure services. Not all of these are necessarily vulnerable, as specific version information may not be available. * [Platform query](https://platform.censys.io/search?q=host.services.software%3A+%28vendor%3A+%22Ivanti%22+and+product%3A+%22Connect+Secure%22%29) * [Legacy Search query](https://search.censys.io/search?resource=hosts\&sort=RELEVANCE\&per_page=25\&virtual_hosts=EXCLUDE\&q=services.software%3A+%28vendor%3D%22Ivanti%22+and+product%3D%22Connect+Secure%22%29) * [ASM query](https://app.censys.io/inventory?query=host.services.software%3A%20\(vendor%3D%22Ivanti%22%20and%20product%3D%22Connect%20Secure%22\)\&pageSize=100\&tab=all\&columns=type_id_risks_source_tags_associationDate_cloud_expirationDate_accountId\&ref=sb) * [ASM risk query](https://app.censys.io/inventory?query=risks.name%20%3D%20%22Vulnerable%20Ivanti%20Connect%20Secure%20Application%20%5BCVE-2025-22457%5D%22\&pageSize=100\&tab=all\&columns=type_id_risks_source_tags_associationDate_cloud_expirationDate_accountId\&ref=sb) * This query can be used to identify exposed instances of Ivanti Connect Secure that are vulnerable to the exploit. ## New fingerprints

Type	Name	Description	Query
risk	Vulnerable CrushFTP \[CVE-2025-2825, CVE-2025-31161]	CrushFTP contains an unauthenticated authentication bypass vulnerability. This affects CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0. There are two CVE-IDs because the original CVE-2025-2825 was assigned by VulnCheck, but the vendor has identified the CVE-ID as CVE-2025-31161.	[ASM query](https://app.censys.io/inventory?query=risks.name%20%3D%20%22Vulnerable%20CrushFTP%20%5BCVE-2025-2825%2C%20CVE-2025-31161%5D%22\&pageSize=100\&tab=all\&columns=type_id_risks_source_tags_associationDate_cloud_expirationDate_accountId\&ref=sb)
risk	Vulnerable Ivanti Connect Secure Application \[CVE-2025-22457]	This Ivanti Connect Secure (before 22.7R2.6) application is vulnerable to CVE-2025-22457. This vulnerability allows an unauthenticated attacker to achieve remote code execution.	[ASM query](http://app.censys.io/inventory?query=risks.name%20%3D%20%22Vulnerable%20Ivanti%20Connect%20Secure%20Application%20%5BCVE-2025-22457%5D%22\&pageSize=100\&tab=all\&columns=type_id_risks_source_tags_associationDate_cloud_expirationDate_accountId\&ref=sb)
software	Medsynapse PACS	Medsynapse PACS is a web-based picture archiving and communication system (PACS) for transfer of medical images within and outside hospitals.	[Platform query](https://platform.censys.io/search?q=host.services.software%3A+%28vendor%3A%22Medsynapse%22+and+product%3A%22Medsynapse+PACS%22%29+or+web.software%3A+%28vendor%3A%22Medsynapse%22+and+product%3A%22Medsynapse+PACS%22%29) [Legacy Search query](https://search.censys.io/search?resource=hosts\&sort=RELEVANCE\&per_page=25\&virtual_hosts=INCLUDE\&q=services.software%3A+%28vendor%3A%60Medsynapse%60+and+product%3A%60Medsynapse%20PACS%60%29)

[An RSS feed for the Censys changelog is available here](https://docs.censys.com/changelog.rss).