Heise.De

Critical Remote Code Execution Vulnerability in Monsta FTP Discovered

First seen 2 Dec 2025, 18:33 UTC • Gbhackers

•53.2

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A remote code execution vulnerability, CVE-2025-34299, has been identified in Monsta FTP, affecting versions 2.11 and earlier. This flaw allows unauthenticated users to upload arbitrary files, enabling attackers to execute malicious code. An update is available to address this critical risk, rated CVSS 9.3.

How this analysis works

Attack Flow

10 entities, 11 inferred relationships (STIX 2.1).

Technique (2)

Data Breach
Remote Code Execution

Organization (3)

Logitech
Washington Post
MOVEit Transfer

Vulnerability (3)

CVE-2022-31827
CVE-2025-34299
SSRF

Affected Platform (1)

Monsta FTP

Threat Actor (1)

Cl0p

Relationships

Cl0p uses Data Breach
Cl0p uses Remote Code Execution
Cl0p exploits CVE-2022-31827
Cl0p exploits CVE-2025-34299
Cl0p exploits SSRF
CVE-2022-31827 targets Monsta FTP
CVE-2025-34299 targets Monsta FTP
SSRF targets Monsta FTP
Cl0p targets Logitech
Cl0p targets Washington Post
Cl0p targets MOVEit Transfer

Continue Reading

Logitech Confirms Data Breach from Zero-Day Exploit by Clop Gang Washington Post Confirms Breach from Oracle EBS Attacks by Cl0p Ransomware Gang Cl0p Ransomware Group Claims Data Theft from Nearly 50 Companies EU Sanctions Russia Over Ongoing Cyber Espionage Campaign ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability AI-Generated Exploits Target Siemens PLCs in Critical Infrastructure

Critical Remote Code Execution Vulnerability in Monsta FTP Discovered

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading