Back Cybersecuritynews

CISA Warns of Wing FTP Server Vulnerability Exploited in Attacks

Cybersecuritynews •Abinaya • March 17, 2026

A high-priority alert has been issued for a critical vulnerability in Wing FTP Server, added to the Known Exploited Vulnerabilities (KEV) catalog on March 16, 2026. This addition confirms that malicious actors are actively weaponizing the vulnerability in real-world network attacks. Organizations relying on this secure file transfer software are advised to take immediate action […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Alerts on Actively Exploited Wing FTP Server Vulnerability CVE-2025-47813 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned about an actively exploited vulnerability in Wing FTP Server, tracked as CVE-2025-47813. This flaw allows attackers to disclose the local installation path of the application by using a long value in the UID cookie, posing a medium risk (CVSS 4.3). CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on March 16, 2026, urging all users, especially federal agencies, to secure their systems. The vulnerability is part of a series of flaws, including the critical CVE-2025-47812, which allows remote code execution without requiring login. The affected versions are those prior to 7.4.4, released in May 2025. Cybercriminals are actively targeting data transfer software, increasing the urgency for organizations to patch their systems. The developer has since released version 8.1.2, which addresses these vulnerabilities. CISA's advisory highlights the ongoing risks associated with outdated software in the cybersecurity landscape. 8 sources 61

Extracted Entities

Platforms (1)

Wing FTP Server