Article

    Cyber News / Article / Vulnerability in Wing FTP Server software

    Vulnerability in Wing FTP Server software
    CE
    CERT Polska-8 days ago

    Vulnerability in Wing FTP Server software

    CERT Polska has received a report about vulnerability in Wing FTP Server software and participated in coordination of its disclosure.

    The vulnerabilityCVE-2026-105420: Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base folder. This allows the attacker to write files on the system and can lead to remote code execution with process owner privileges. Critically, since the installation guide mentions running the command withsudo, the files are created as “root”.

    This issue was fixed in version 8.2.6.

    We thank Olek Malinowski for the responsible vulnerability report.

    Original source

    You might Also like

    Northflank security breach leads to abuse of customers' AI API keys
    La
    Lawrence Abrams-5 days ago

    Northflank security breach leads to abuse of customers' AI API keys

    New Android SMS of Death exploit can remotely crash unpatched phones
    La
    Lawrence Abrams-5 days ago

    New Android SMS of Death exploit can remotely crash unpatched phones

    Polymarket Users Lose $2.7 Million in Third-Party Script Hack
    De
    Deeba Ahmed-5 days ago

    Polymarket Users Lose $2.7 Million in Third-Party Script Hack