CVE-2025-47812

CriticalCVSS 10.0/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is thus a remote code execution vulnerability that guarantees a total server compromise. This is also exploitable via anonymous FTP accounts.

Metrics

CVSS 3.1 10.0/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-158

Affected software

No affected versions have been published.

Timeline

Published: Jul 10, 2025
Last modified: Jun 17, 2026
Added to CISA KEV: Jul 14, 2025
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-478134.3loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UI CVE-2025-478149.8libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_CVE-2025-478159.8libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_CVE-2025-478169.1libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related t CVE-2025-478178.8In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.CVE-2025-478184.6Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.CVE-2025-478196.8Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.CVE-2025-47828.8A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affect CVE-2025-478202.4Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.CVE-2025-478214.6Flock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system.CVE-2025-478226.8Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have an on-chip debug interface with improper access control.CVE-2025-478234.6Flock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded password for a system.