CVE-2025-47812

criticalpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.939 · 100 %ileexploit · weaponizedEUNLRUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 21 exploits · weaponized

Likely / severe?

93.9% (100th) EPSS

CVSS 10 · critical

Is it mine?

4 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · ncsc_nl

added 2025-07-14remediate by 2025-08-04

required action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS · scored 2026-10-26

Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is thus a remote code execution vulnerability that guarantees a total server compromise. This is also exploitable via anonymous FTP accounts.

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.110criticalAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · ENISA EU

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · cve@mitre.org USexploitability 3.9 · impact 6

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

v3.110criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · NCSC-NL NL

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-158USCWE-158USCWE-158US

ATT&CK techniques

ATT&CK techniques this enables or maps to.

exploits (21)

Public proof-of-concept and weaponised exploit code.

exploit/multi/http/wingftp_null_byte_rceWing FTP Server NULL-byte Authentication Bypass (CVE-2025-47812)weaponized · metasploit
exploit/windows/ftp/wing_ftp_admin_execWing FTP Server Authenticated Command Executionweaponized · metasploit
EDB-52347Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)PoC · exploit_db
0xS4N4TG/CVE-2025-47812CVE-2025-47812 Poc for wingdata HTBPoC · poc_in_github
0xcan1337/CVE-2025-47812-poCSimple exploit for Wing FTP Server RCE (CVE-2025-47812) to run commands and get a reverse shell. For educational use only.PoC · poc_in_github
0xgh057r3c0n/CVE-2025-47812Wing FTP Server RCE via Lua InjectionPoC · poc_in_github

affected products (4)

Products and version ranges known to be affected.

wftpserver Wing FTP Server0 → 7.4.4enisa_euvdEU
Wing FTP Software Wing FTP Server≤ 7.4.4fstec_bduRU
wftpserver Wing FTP Server≤ vers:unknown/<7.4.4ncsc_nlNL
wftpserver wing ftp server< 7.4.4nvdUScpe:2.3:a:wftpserver:wing_ftp_server:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

NCSC-2025-0230Kwetsbaarheid verholpen in Wing FTP ServerNL2025-07-14csaf · ncsc_nlNL
De ontwikkelaar van Wing FTP Server heeft een kwetsbaarheid verholpen in versie 7.4.4.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu ncsc_nl nvd NVD CVE.org MITRE

published 2025-07-10modified 2026-06-17

references (17)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan