Approved changes feed: RSS · Atom

cpe:2.3:a:wftpserver:wing_ftp_server:6.2.6:*:*:*:*:*:*:*

part: a version: 6.2.6 update: *

VendorWftpserver (68f35104-b95e-54d2-8a1c-36df21d61dee)
ProductWing Ftp Server (8831436e-aff8-5693-893a-777007f92bdf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37079 vulnerable 2026-06-08 05:25:50.113679 Wing FTP Server < 6.2.7 - Cross-site Request Forgery
MEDIUM (4.3)
Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery (CSRF) vulnerability in the web administration interface that allows attackers to delete admin users. Attackers can craft a malicious HTML page with a hidden form to submit a request that deletes the administrative user account without proper authorization.
Published: 2026-02-06T23:16:47.715Z
Updated: 2026-03-05T01:27:46.508Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.