VULNERABILITY INTELLIGENCE

CVE-2025-27937

CVSS score7.1 HIGH

EPSS probability0.70%

CISA KEVNot currently listed

Published2025-04-28

Last modified2026-06-17

Description

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, an arbitrary file in the affected product may be obtained by a remote attacker who can log in to the product.