[ Vendor · 2 CVEs ]

Wing FTP Server

CVEs affecting Wing FTP Server published in the last 30 days, plus any Wing FTP Server CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2025-47812 10 Jul 2025 CVSS 10.0 Wing FTP Server Improper Neutralization of Null Byte or NUL CharacterIn Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into… Exploited
CVE-2025-47813 10 Jul 2025 CVSS 4.3 Wing FTP Server Information Disclosureloginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie. Exploited