Skip to main navigation Skip to main content Skip to page footer

Security Alert: Critical Remote Code Execution Vulnerabilities in PHP

Data Protection Office
Contact us Report an incident
Data Protection Office
Contact us Report an incident

Alert: Wing FTP Server Security Update - July 2025

A critical vulnerability(CVE-2025-47812) in Wing FTP Server has been patched, addressing a flaw that could allow attackers to execute arbitrary code and gain elevated privileges on affected systems.

 

Affected Systems:

 

The affected systems and versions include:

  • Wing FTP Server versions 7.4.3 and earlier running on Windows, Linux, and macOS.

 

Security Risks

The identified critical vulnerabilities in various Wing FTP Server pose a serious threat, potentially allowing attackers to compromise affected systems and gain unauthorized control.

 

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

  • Update, as soon as possible, to the latest supported version for the Wing FTP Server in order to address the vulnerability and effectively mitigate associated risks.

 

 The Wing FTP Software versions available for upgrade include:

 

For further information and support, please contact the National Cyber Security Authority (NCSA) by email to rwcsirt@ncsa.gov.rw or call us on 9009.

 

References