CISA Issues Alert on Wing FTP Server Vulnerability Used in Attacks
ID: 028c796a-b791-5dc8-aad1-683867f4c9ec
STIX ID: report--028c796a-b791-5dc8-aad1-683867f4c9ec
Feed Name: GBHackers
Threat Score
On March 16, 2026, CISA added CVE-2025-47813—an information-disclosure vulnerability in Wing FTP Server caused by an oversized UID cookie that triggers detailed error messages—to its Known Exploited Vulnerabilities catalog, warning of active exploitation; CISA requires agencies to apply vendor patches or mitigate/discontinue the product by March 30, 2026 and references BOD 22-01 guidance for remediation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.