Skip to content
Critical Remote Code Execution Vulnerability in Monsta FTP Discovered

Critical Remote Code Execution Vulnerability in Monsta FTP Discovered

First seen 2 Dec 2025, 18:33 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A remote code execution vulnerability, CVE-2025-34299, has been identified in Monsta FTP, affecting versions 2.11 and earlier. This flaw allows unauthenticated users to upload arbitrary files, enabling attackers to execute malicious code. An update is available to address this critical risk, rated CVSS 9.3.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 219d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Cl0p, Logitech and CVE-2022-31827 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed