CVE-2025-6799

CVE-2025-6799 is a directory traversal vulnerability in Marvell QConvergeConsole, allowing remote attackers to disclose sensitive information without authentication. The flaw stems from insufficient validation of user-supplied paths in the getFileUploadBytes method, enabling information disclosure with SYSTEM privileges. With a CVSS score of 7.5 (HIGH) and a FAUCET Risk Score of 96/100, it poses a significant risk due to its network-based attack vector and low attack complexity. While there is no known active exploitation or public exploit code, the vulnerability has garnered substantial community discussion, indicating potential interest from threat actors.