CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths

Foto: The Hacker News
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a medium-severity security flaw impacting Wing FTP to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, CVE-2025-47813 (CVSS score: 4.3), is an information disclosure vulnerability that leaks the installation path of the application under certain conditions
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a medium-severity security flaw impacting Wing FTP to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, CVE-2025-47813 (CVSS score: 4.3), is an information disclosure vulnerability that leaks the installation path of the application under certain conditions
More from Security

Chinese Hackers Target Southeast Asian Militaries with AppleChris and MemFun Malware

Meta to Shut Down Instagram End-to-End Encrypted Chat Support Starting May 2026

INTERPOL Dismantles 45,000 Malicious IPs, Arrests 94 in Global Cybercrime

Storm-2561 Spreads Trojan VPN Clients via SEO Poisoning to Steal Credentials
Related Articles

GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos
21h
Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware Abuse
Mar 16
OpenClaw AI Agent Flaws Could Enable Prompt Injection and Data Exfiltration
Mar 14