CVE-2025-47813 – Wing FTP Server Security Update

CVSS 4.3 MODERATE

“Even a medium-severity weakness becomes dangerous when attackers are already using it.”

Wing FTP Server addressed CVE-2025-47813, a vulnerability affecting how the server processes certain requests within its FTP service components. The weakness could allow attackers to manipulate server behavior and perform unauthorized actions through the service. Because FTP servers are often exposed to the internet and used for transferring sensitive files, exploitation could give attackers a foothold inside the network or access to stored data.

CVE-2025-47813 has a CVSS score of 4.3, which is Medium severity. Despite the moderate rating, the issue is actively exploited in the wild, increasing the real-world risk for organizations running vulnerable versions of Wing FTP Server. Systems that expose file transfer services to the internet face the greatest exposure until the patch is applied.

Key Details

Affected Product
Wftpserver Wing Ftp Server
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
CWE Classification
CWE-209
Patch this CVE on all your endpoints in under 5 minutes. First 200 endpoints are free forever, scale as needed.