Hackers are exploiting a critical RCE Flaw in a popular FTP server — here's what you need to know

A hacker wearing a hoodie sitting at a computer, his face hidden.

• Hackers launched attacks just one day after the flaw’s full technical write-up was made public
• Many servers stayed vulnerable for weeks despite a fix being released long before the disclosure
• Null byte injection in the username field lets attackers bypass login and run Lua code

Security researchers have confirmed attackers are actively exploiting a critical vulnerability in Wing FTP Server, a widely used solution for managing file transfers.