tag
Wingftp
Critical
Wing FTP Server NULL-Byte Lua Injection Unauthenticated RCE (CVE-2025-47812)
CVE-2025-47812·
Wing FTP Server, web administration/login interface (loginok.html, session mechanism)
patched
High
Wing FTP Server Admin Session Poisoning via Lua loadfile() RCE (CVE-2026-44403)
CVE-2026-44403·
Wing FTP Server (WebAdmin console)
patched