Directory Traversal and Information Disclosure in Marvell QConvergeConsole

CVE-2025-8426

What is CVE-2025-8426?

The Marvell QConvergeConsole contains a vulnerability within its compressConfigFiles method, which fails to properly validate user-supplied paths before executing file operations. This flaw enables remote attackers to exploit the affected installations, leading to potential disclosure of sensitive information and creating conditions that may result in denial-of-service. Importantly, no authentication is required to successfully execute this attack, which amplifies the risk to users.

References