CVE-2025-47812 - Critical Wing FTP Server Vulnerability Alert

The Flaw

On May 14, 2025, Wing FTP announced a critical vulnerability affecting its FTP server software. This vulnerability, identified as CVE-2025-47812, allows for remote code execution. This means that attackers can execute arbitrary code on affected systems, potentially taking complete control. The vulnerability has been rated with a CVSS score of 10.0, indicating its severity.

The issue affects all versions of Wing FTP Server up to and including v7.4.3. As of July 10, 2025, reports surfaced indicating that this vulnerability was being actively exploited in the wild. This alarming news prompted urgent action from cybersecurity authorities and the Wing FTP team.

What's at Risk

Organizations using the vulnerable versions of Wing FTP Server are at significant risk. Attackers can exploit this vulnerability to gain unauthorized access to sensitive data or disrupt services. The implications can be severe, including data loss, financial damage, and reputational harm.

Given the nature of FTP servers, which often handle sensitive file transfers, the stakes are particularly high. Businesses that rely on Wing FTP for their operations must prioritize addressing this vulnerability to prevent potential breaches.

Patch Status

In response to the identified risks, Wing FTP released an update to address this vulnerability. Users are urged to upgrade to Wing FTP Server v7.4.4 or later to mitigate the risks associated with CVE-2025-47812. Additionally, on March 16, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-47813 to their Known Exploited Vulnerabilities (KEV) Database, highlighting the ongoing threat landscape.

Organizations are encouraged to review their systems and implement the necessary updates as soon as possible. Keeping software up to date is crucial in defending against cyber threats.

Immediate Actions

To protect your systems from exploitation, follow these steps:

1. Upgrade to Wing FTP Server v7.4.4 or higher immediately.
2. Monitor your network for any unusual activity that may indicate exploitation attempts.
3. Review your security policies and ensure they are up to date with current best practices.
4. Educate your team about the importance of timely software updates and vulnerability management.

By taking these proactive measures, organizations can significantly reduce their risk of falling victim to attacks exploiting this critical vulnerability.