Monsta Limited Of New Zealand Monsta FTP
2 CVEs affecting Monsta Limited Of New Zealand Monsta FTP. Latest disclosed: 2026-07-08. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-34299 | Critical | 9.8 | 2025-11-07 | Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitra… |
CVE-2026-60105 | High | 8.6 | 2026-07-08 | Monsta FTP before 2.14.5 contains a server-side request forgery vulnerability in the fetchRemoteFile action caused by an incomplete IP blocklist check in the i… |