CVE-2025-6793

CVE-2025-6793 is a critical directory traversal vulnerability affecting Marvell QConvergeConsole, specifically within the QLogicDownloadImpl class. This flaw allows unauthenticated remote attackers to delete arbitrary files and disclose sensitive information on vulnerable systems. With a CVSS score of 9.4 (Critical), its low attack complexity and lack of authentication requirements enable high impact to confidentiality, integrity, and availability, allowing attackers to operate in the context of SYSTEM. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, indicating potential future interest from threat actors.