CVE-2025-6802

Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The...

CVE-2025-6802

CVE-2025-6802 affects Marvell QConvergeConsole and is tied to the getFileFromURL method, where lack of input validation permits unrestricted file uploads. The result is remote code execution with the attacker able to run code in the context of SYSTEM, and authentication is not required. Documents...