CVE-2025-47813: Wing FTP Server Information Disclosure Vulnerability

Required action (CISA's text)

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description (NVD)

Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie.

SOURCES

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Other Wing FTP Server flaws

• CVE-2025-47812: Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.