Exploited Vulnerabilities DailyCVE-2025-47812: Wing FTP Server Wing FTP Server
EPSS93.2%No. 410 of 1739 in KEV
CVE year2025listed the same year
Same vendor in KEV2
Same product2
| Field | Value |
|---|---|
| Vendor | Wing FTP Server |
| Product | Wing FTP Server |
| Name | Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability |
| Added to KEV | 2025-07-14 |
| US federal due date | 2025-08-04 |
| Ransomware use | Unknown |
| CWE | CWE-158 |
CISA description
Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that can allow injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default).
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-47813 | Wing FTP Server Wing FTP Server | 2026-03-16 | 63.1% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Wing FTP Server Wing FTP Server vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-07-14.