Wing FTP Software

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Wing FTP Software records in CISA KEV

No Wing FTP Software vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-83857 CVE-2026-120491 · GHSA-76h6-gfhv-jpgq

Stored cross-site scripting in Wing FTP Server via nowpath parameter

LOW 22

Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client users to inject script by sending a crafted nowpath parameter to webclient/makethumb.html.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00176 Published 2026-11-02 Fixed in 8.2.6 CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0