Exploited Wing file transfer bug risks ‘total server compromise,’ CISA warns
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-47812 | Unauthenticated RCE in Wing FTP Server via null-byte Lua injection | 10.0 | 94% | KEVPoC ×2 | KEV |
From the original article
2 min read at therecord.media
A vulnerability in products from the file transfer company Wing FTP Server is being actively exploited, the Cybersecurity and Infrastructure Security Agency (CISA) warned Monday. The agency confirmed industry reports of exploitation, adding it to the Known Exploited Vulnerabilities (CVE) catalog and ordering all federal civilian agencies to patch the bug by August 4.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.