Wftpserver vendor intelligence

Wftpserver Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Wftpserver products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed
Total KEVs
2
Known exploited vulnerabilities affecting Wftpserver products
In CISA KEV
2
Records also listed in the official catalog
Beyond CISA KEV
0
Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed
0
Wftpserver KEVs with sensor-observed exploitation activity

Review Wftpserver exploitation against the products you run

Both exploited Wftpserver vulnerabilities tracked by Previdian are also listed in CISA KEV.

100%
Covered by CISA
0%
Beyond CISA
1
Product families

Attested Wftpserver vulnerabilities

2 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2025-47813

loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.

Wing FTP Server Confirmed In CISA 01 Jun 2026
CVE-2025-47812

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into...

Wing FTP Server Confirmed In CISA 01 Jun 2026

Showing 2 of 2 on this page (2 Wftpserver known exploited vulnerabilities).

Recurring weakness patterns

Neutralization and generation account for two mapped occurrences across this Wftpserver KEV portfolio.

Browse all KEVs →