Monstaftp Monsta Ftp vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Monstaftp Monsta Ftp: 1 record(s), with affected versions and fixes.
cpe:2.3:a:monstaftp:monsta_ftp

CVE-2025-34299 Critical · 9.8 Public exploit CWE-434 Nov 7, 2025

Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload

Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious (S)FTP server.