Security News Over 1,400 CrushFTP servers vulnerable to actively exploited bug BleepingComputer Daniel Bender 25 Apr 2024 Share Over 1,400 CrushFTP servers exposed online were found vulnerable to attacks currently targeting a critical severity server-side template injection (SSTI) vulnerability previously exploited as a zero-day.