Critical Alert 1 Active Exploit Detected Today

CVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability →
Powered by CVE Watchtower
×

CVE Watchtower

Advanced Threat Data Export

Filter and download the raw CVE repository (CSV/JSON) for SIEM integration and internal reporting.

Data export is locked. Upgrade your package to enable filtering and downloading.

← Back to CVE List

CVE-2025-47813NVD

Description

loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.
Severity Level
MEDIUM (4.3)
Published Date
10/07/2025
Last Modified
16/03/2026
Exploitation Status
ACTIVE