Skip to content
OpenAdvisories

Vendor

Wing FTP Server

7 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-44403 Public exploit

    Wing FTP Server < 8.1.3 Authenticated Remote Code Execution via Session Serialization

    Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allows authenticated administrators to inject arbitrary Lua code through the domain admin mydirectory field. Attackers can e…

  • High 8.8

    Wing FTP Server 6.3.8 - Remote Code Execution

    Wing FTP Server 6.3.8 contains a remote code execution vulnerability in its Lua-based web console that allows authenticated users to execute system commands. Attackers can leverage the console to send POST requests with malicious commands that trigger operati…