Exploited Wing file transfer bug risks ‘total server compromise,’ CISA warns

**Executive summary:** A critical remote code execution flaw (CVE-2025-47812) in Wing FTP Server — rated 10/10 and described as allowing total server compromise — is being actively exploited; CISA added it to the Known Exploited Vulnerabilities catalog and ordered urgent patching. Security firms observed exploitation attempts, post-exploitation activity (downloads, reconnaissance, remote monitoring software installs), and internet-wide scans show thousands of exposed instances, so organizations should update to Wing FTP Server 7.4.4 immediately.