⚠️ monsta ftp flaw under active exploitation

CVE-2025-34299 enables unauthenticated RCE in Monsta FTP ≤ 2.11.2 via crafted POST requests abusing downloadFile.
Attackers can upload payloads and gain full server control.

Patch to v2.11.3 immediately.

#ransomNews #MonstaFTP #CVE202534299