Skip to content
Threat Feed
Subscribe

Vendor

Wftpserver

1 brief RSS
critical advisory

Wing FTP Server: Unauthenticated Lua injection remote code execution (CVE-2025-47812)

An unauthenticated remote code execution vulnerability (CVE-2025-47812) in Wing FTP Server <= 7.4.3 allows attackers to execute arbitrary code via Lua injection into session files by leveraging a NULL byte truncation flaw in username handling.

Wing FTP Server
1r 2t 1c