Security News Over 1,400 CrushFTP servers vulnerable to actively exploited bug BleepingComputer Daniel Bender Apr 25, 2024 Over 1,400 CrushFTP servers exposed online were found vulnerable to attacks currently targeting a critical severity server-side template injection (SSTI) vulnerability previously exploited as a zero-day.