Security Advisory
CVE-2025-34299
9.8
CRITICAL
Vulnerability Description
Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious (S)FTP server.
Published Date
November 7, 2025
Official Source
NIST NVD Advisory