Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Wing FTP Server actively exploited installation path disclosure remote code execution flaw (CVE-2025-47813)

Vulnerability
First reported
Last updated
Happening score
H score 61
1 unique sources, 1 articles

Summary

Hide ▲

Wing FTP Server instances faced active exploitation of CVE-2025-47813, a flaw that can reveal the server's full local installation path on unpatched systems. The weakness may support attack chaining into remote code execution. CISA added the CVE to its actively exploited catalog and urged rapid remediation.

Related Happenings

CISA adds CVE-2026-12569 to KEV for PTC Windchill and FlexPLM

Public Sector Action
H score46 First: 26.06.2026 15:31 Last: 26.06.2026 15:31 Sources 1

About this happening: CISA added CVE-2026-12569 to the KEV catalog after finding active exploitation of PTC Windchill PDMlink and PTC FlexPLM, elevating the flaw to a federal remedi...

Open Happening

CISA KEV remediation order for CVE-2026-48907

Public Sector Action
H score89 First: 17.06.2026 08:50 Last: 17.06.2026 08:50 Sources 1

About this happening: CISA added CVE-2026-48907 to the KEV catalog and ordered FCEB agencies to apply fixes by June 19, 2026, forcing federal remediation of an actively exploited Jo...

Open Happening

CISA KEV mitigation for LiteSpeed cPanel Plugin (CVE-2026-54420)

Advisory/Mitigation
H score38 First: 16.06.2026 08:41 Last: 16.06.2026 08:41 Sources 1

About this happening: CISA put CVE-2026-54420 in LiteSpeed cPanel Plugin on the KEV catalog, ordering FCEB agencies to apply fixes by June 18, 2026. The flaw is a CVSS 8.5 privile...

Open Happening

CISA BOD 26-04 remediation requirements

Advisory/Mitigation
H score31 First: 11.06.2026 15:46 Last: 11.06.2026 15:46 Sources 1

About this happening: CISA’s Binding Operational Directive 26-04 forces FCEB agencies to speed up remediation of high-risk vulnerabilities, with some deadlines as short as 3 days and new ...

Open Happening

CISA KEV order for SolarWinds Serv-U CVE-2026-28318

Public Sector Action
H score50 First: 06.06.2026 11:14 Last: 06.06.2026 11:14 Sources 1

About this happening: CISA added CVE-2026-28318 affecting SolarWinds Serv-U to the KEV catalog and ordered FCEB agencies to remediate it by June 19, 2026. The directive expands...

Open Happening

Timeline

  1. 16.03.2026 20:00 2 articles · 4mo ago

    CISA adds Wing FTP Server CVE-2025-47813 to actively exploited catalog

    Legal Policy Action Update

    CISA added Wing FTP Server CVE-2025-47813 to its actively exploited catalog and directed Federal Civilian Executive Branch agencies to secure affected servers within two weeks under BOD 22-01. The flaw exposes the full local installation path through a long UID cookie value and can be chained into remote code execution on unpatched Wing FTP Server instances. Wing FTP Server v7.4.4 had already patched CVE-2025-47813 in May 2025 alongside CVE-2025-47812 and CVE-2025-27889, and Julien Ahrens shared proof-of-concept exploit code for CVE-2025-47813 in June.

    Show sources
    Open in new tab