ZeusQA
Start free

Known exploited vulnerabilities

Wing FTP Server vulnerabilities attackers have used

Every Wing FTP Server vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 Wing FTP Server vulnerabilities as exploited in the wild, 1 of them added in the last 12 months. The most recent is CVE-2025-47813, added Mar 16, 2026. Wing FTP Server has the most entries (2).

In KEV, all time
2
Added, last 12 months
1
Used in ransomware
0
New CVEs this week
0

Every Wing FTP Server entry in CISA KEV

  1. CVE-2025-47813

    Added · due

    Wing FTP Server Information Disclosure Vulnerability

    Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie.

  2. CVE-2025-47812

    Added · due

    Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

    Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that can allow injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works