Back to the CVE list
CVE-2025-34299

Unrestricted file upload in Monstaftp Monsta FTP

CVSS score

9.8

EPSS probability

%72.7

Risk score

7.1

Published

11 mo ago

OverviewPublic Exploits (5)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
KrE80r/CVE-2025-34299-lab
GitHub

Docker test environment for CVE-2025-34299 - Monsta FTP Pre-Auth RCE vulnerability

Public PoCSource updated: 11.12.2025 03:42:33
G
Chocapikk/CVE-2025-34299
GitHub

MonstaFTP Unauthenticated File Upload

Public PoCSource updated: 23.08.2026 12:39:14
G
rxerium/CVE-2025-34299
GitHub

Detection for CVE-2025-34299

Public PoCSource updated: 13.01.2026 11:21:15
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34299.yaml
Nuclei

Nuclei: Monsta FTP <= 2.11.2 - Unauthenticated Remote Code Execution

Exploit reference
N
https://labs.watchtowr.com/whats-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299/
NVD reference

https://labs.watchtowr.com/whats-that-coming-over-the-hill-monsta-ftp-remote-code-execution-cve-2025-34299/

Exploit reference

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-34299"