A vulnerability was added to the database, and it was found to be exploited in the wild.

Tracked as CVE-2025-47813, the security flaw allows threat actors with low privileges to discover the full local installation path of the application on unpatched servers ...

CISA warns of active exploitation of CVE-2025-47813 in Wing FTP Server, which allows attackers to determine the software’s ...

CISA warned U.S. government agencies to secure their Wing FTP Server instances against an actively exploited vulnerability that may be chained in remote code execution attacks.

CISA warns that a Wing FTP vulnerability leading to the disclosure of the full local installation path has been exploited in attacks.

CISA adds Wing FTP CVE-2025-47813 to KEV after active exploitation, exposing server paths and aiding attacks; patch by March 30, 2026.

Over the weekend, security researchers released a proof-of-concept (PoC) exploit for a maximum severity remote code execution vulnerability in Progress Software's WS_FTP Server file sharing platform.