Exploited vulnerability
CVE-2025-47813
TLP:CLEAR
Wing FTP Server Information Disclosure Vulnerability
Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie.
Facts
- Vendor: Wing FTP Server
- Product: Wing FTP Server
- CVSS: 4.3
- EPSS (probability of exploitation within 30 days): 62.5 %
- On CISA's Known Exploited Vulnerabilities list since: 16 March 2026
- First known exploitation: 16 March 2026
- CISA's deadline for US federal agencies: 30 March 2026
- Weakness: CWE-209
- First seen by Risk Letters: 20 March 2026
Members see which Nordic sectors the flaw hits, and what to do about it.
Get the full brief
Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD