Wing Soft Technology vulnerabilities

Products

• Wing FTP Server 1

Latest Wing Soft Technology CVEs

Newest publication first

1. CVE-2026-105420 Path Traversal in Wing WFTP Server leading to Remote Code Execution

   Published 2026-10-28

   Critical·CVSS 9.4 EPSS 0.52%

   Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base folder. This allows the attacker to write files on the system and can lead to remote code execution with p...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.