https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:42:23.875362+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-246460 EUVD-2026-246460 2026-10-07T16:42:23.930689+00:00 EUVD-2026-246460 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6806 fkie_cve-2025-6806 2026-10-07T16:42:23.930724+00:00

Marvell QConvergeConsole decryptFile Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the implementation of the decryptFile method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to write files in the context of SYSTEM. Was ZDI-CAN-24979.

 https://cve.radiocsirt.org/vuln/ghsa-wh83-3gcw-w65g GHSA-wh83-3gcw-w65g 2026-10-07T16:42:23.930762+00:00

Marvell QConvergeConsole decryptFile Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the implementation of the decryptFile method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to write files in the context of SYSTEM. Was ZDI-CAN-24979.