CISA Warns of Active Exploitation in Wing FTP Server Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-47813, a vulnerability in Wing FTP Server, to its Known Exploited Vulnerabilities Catalog after confirming active exploitation in the wild. The flaw, disclosed in July 2025, affects versions 7.4.4 and earlier and allows attackers to expose the full local installation path of the application via maliciously crafted error messages. While classified as medium-severity, the vulnerability can be chained with two other patched flaws CVE-2025-47812 (remote code execution) and CVE-2025-27889 (information disclosure) to amplify its impact. Security researcher Julien Ahrens previously demonstrated in June 2024 how these vulnerabilities could be combined for maximum exploitation. CISA emphasized that such flaws are common attack vectors for malicious actors, posing significant risks to federal networks. Wing FTP Server has since released patches for all three vulnerabilities in later versions. Organizations running outdated installations are urged to update immediately to mitigate potential threats.