CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths

🗓️ 17 Mar 2026 05:23:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 5 Views

CISA adds Wing FTP disclosure flaw to KEV; leaks install path via UID cookie; active exploitation.

Reporter	Title	Published	Views	Family All 71
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	2 Jul 202521:51	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	18 Feb 202608:41	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	1 Jul 202518:20	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Astaro Security_Gateway_Software	30 Apr 201915:15	–	githubexploit
GithubExploit	HTB-WingData-Writeup	27 Apr 202615:17	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	1 Jul 202512:02	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	27 Jul 202517:47	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	7 Jul 202513:20	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	4 Jul 202516:22	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	22 Feb 202618:28	–	githubexploit

17 Mar 2026 05:23Current

7.9High risk

Vulners AI Score7.9

CVSS 3.110

EPSS0.95343

SSVC

Wing FTP Information disclosure UID cookie Active exploitation Affected versions Patch release