CISA
CISA Adds CVE-2025-47813 to Known Exploited Vulnerabilities Catalogue
According to CISA, the Known Exploited Vulnerabilities (KEV) Catalog lists Wing FTP Server under CVE-2025-47813 as an information disclosure vulnerability where a long value in the UID cookie can cause an error message to reveal sensitive information. The entry notes CWE-209 in relation to the vulnerability.
It also states that the vulnerability is currently Unknown in terms of being used in ransomware campaigns, with recommended actions including applying mitigations per vendor instructions, following the guidance for cloud services under BOD 22-01, or discontinuing use of the product if mitigations are unavailable. The page shows this as a single entry, with the Date Added of 16 March 2026 and a Due Date of 30 March 2026.
The KEV catalog provides downloadable formats and guidance for prioritising vulnerability management, and this particular item is associated with Wing FTP Server.
Story timeline CVE-2025-47813
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 16 Mar · 18:49 UTC | CISA | CISA Adds CVE-2025-47813 to Known Exploited Vulnerabilities Catalogue |
| Mon 16 Mar · 18:52 UTC | CISA | CISA Adds One Known Exploited Vulnerability to Catalog |
| Mon 16 Mar · 21:11 UTC | CISA | CISA Adds CVE-2025-47813 to Known Exploited Vulnerabilities Catalogue (this article) |
| Mon 16 Mar · 21:54 UTC | Security Affairs | U.S. CISA adds a flaw in Wing FTP Server to its Known Exploited Vulnerabilities catalog |
| Tue 17 Mar · 06:01 UTC | The Hacker News | CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths |
| Tue 17 Mar · 11:07 UTC | SecurityWeek | CISA Flags Year-Old Wing FTP Vulnerability as Exploited |