A recently disclosed maximum-severity security flaw impacting the Wing FTP Server has come under active exploitation in the wild, according to Huntress.
The vulnerability, tracked as CVE-2025-47812 (CVSS score: 10.0), is a case of improper handling of null ( ») bytes in the server’s web interface, which allows for remote code execution. It has been addressed in version 7.4.4.
« The user and
