This Wing FTP Server flaw is being actively exploited in attacks – CISA says mitigate now

The US Cybersecurity and Infrastructure Security Agency (CISA) has added a new bug to its Known Exploited Vulnerabilities (KEV) catalog, warning US federal agencies about ongoing attacks and urging them to patch up immediately.

The organization added CVE-2025-47813, a bug found in Wing FTP Server, to KEV.

Wing FTP Server is a cross-platform file transfer server used to securely share and manage files, similar to MOVEit or GoAnywhere Managed File Transfer (MFT) solutions. According to its website, it is used by the likes of US AirForce, Airbus, Reuters, and Sony.