Advisories · Technology

Monsta Limited of New Zealand Monsta FTP.

Every CVE that names Monsta Limited of New Zealand Monsta FTP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-60105 CVE record

CVSS 7.7 High

Monsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass
- Monsta Limited of New Zealand Monsta FTP
- Server-side request forgery (SSRF)
Not analysed yet 8 Jul 2026
CVE-2025-34299 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Monsta FTP <= 2.11 Unauthenticated Arbitrary File Upload
- Monsta Limited of New Zealand Monsta FTP
- Unrestricted file upload
Not analysed yet 7 Nov 2025