Monstaftp vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Monstaftp products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-34299 Critical · 9.8 Public exploit CWE-434 Nov 7, 2025

Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload

Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious (S)FTP server.