Arbitrary File Reading Vulnerability in QbiCRMGateway by Ai3

CVE-2025-9639

What is CVE-2025-9639?

The QbiCRMGateway, developed by Ai3, is susceptible to an Arbitrary File Reading vulnerability. This flaw permits unauthenticated remote attackers to exploit Relative Path Traversal methods, enabling them to download sensitive system files without proper authorization. As a result, attackers can potentially access private and confidential information stored on the server, posing a significant risk to the integrity and security of affected systems.

References