Vulnerability intelligence
CVE-2025-47813
Wing FTP Server Information Disclosure Vulnerability
Wing FTP Server Wing FTP Server
Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie.
CVSS Score
—
Unrated
EPSS — Exploit Probability
59%
Riskier than 99% of all CVEs · checked 2026-09-04
Exploitation
Confirmed in the wild
KEV since 2026-03-16
Remediation
Unconfirmed
Federal deadline 2026-03-30
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2026-03-30.
6 articles across 5 outlets · first covered Mar 16, 2026 · latest Mar 17, 2026
Coverage timeline
-
CISA Flags Year-Old Wing FTP Vulnerability as Exploitedwww.securityweek.com · Mar 17, 2026
-
CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Pathsthehackernews.com · Mar 17, 2026
-
U.S. CISA adds a flaw in Wing FTP Server to its Known Exploited Vulnerabilities catalogsecurityaffairs.com · Mar 16, 2026
-
CISA Adds CVE-2025-47813 to Known Exploited Vulnerabilities Cataloguewww.cisa.gov · Mar 16, 2026
-
CISA Adds One Known Exploited Vulnerability to Catalogwww.cisa.gov · Mar 16, 2026
-
CISA Adds CVE-2025-47813 to Known Exploited Vulnerabilities Cataloguecisa.gov · Mar 16, 2026