# CVE-2025-65418: docuFORM Managed Print Service Client directory traversal

Source: https://junglewise.ai/threats/cve-2025-65418-docuform-managed-print-service-client-directory-traversal  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-11. Updated: 2026-05-14  
License: CC BY 4.0 with a link back

CVE-2025-65418 · Severity: high · CVSS 7.5 · Published 2026-05-11

docuFORM Managed Print Service Client, a tool used to manage and monitor corporate printing and scanning infrastructure, is vulnerable to a security flaw that allows unauthorized access to files. By sending a specially crafted web request, an attacker can bypass security restrictions to read sensitive system files, configuration data, or application source code. This could lead to the exposure of proprietary information or credentials, potentially compromising the broader printing environment.

Technologies: [docuForm Managed Print Service Client](https://junglewise.ai/threats/technologies/managed-print-service-client). Vendors: [docuForm](https://junglewise.ai/threats/vendors/docuform).

## Quick answers

**Is CVE-2025-65418 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-65418 being exploited in the wild.

**How severe is CVE-2025-65418?** High severity, with a CVSS score of 7.5, published 11 May 2026.

**Which products and versions are affected?** docuForm Managed Print Service Client 11.11c.

**Is there a fix for CVE-2025-65418?** A patch was published on 2025-11: Vendor published a fix Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2025-65418 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-65418?** Check whether you run docuForm Managed Print Service Client at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A directory traversal vulnerability exists in docuFORM Managed Print Service Client (also referred to as FSM Client) version 11.11c. The flaw stems from insufficient validation and normalization of user-supplied input used to construct file paths. An unauthenticated remote attacker can exploit this by sending a crafted URL containing path traversal sequences (e.g., '../') to escape the application's intended web root. Successful exploitation allows the attacker to read sensitive files on the underlying filesystem, including configuration files and system data. While the NVD entry mentions directory traversal, the researcher's technical notes also categorize this as CWE-209 (Information Exposure Through an Error Message). A fix was reportedly published by the vendor in November 2025.

## Affected products

- docuFORM Managed Print Service Client (FSM Client) 11.11c

## Timeline

- 2025-10: other: Vulnerability reported to vendor
- 2025-11: patched: Vendor published a fix
- 2026-04: disclosed: Information about the vulnerability published by researcher
- 2026-05-11: advisory: CVE published to NVD

## References

- [https://zerobreach.de/](https://zerobreach.de/)
- [https://gist.github.com/ZeroBreach-GmbH/12c58d9286093a7b634d57df7b8b9386](https://gist.github.com/ZeroBreach-GmbH/12c58d9286093a7b634d57df7b8b9386)
- [https://www.docuform.de/](https://www.docuform.de/)

## Related threats

- [docuFORM Managed Print Service Client reflected XSS in login page](https://junglewise.ai/threats/cve-2025-65417-docuform-managed-print-service-client-reflected-xss-in-login-page)
- [docuFORM Managed Print Service Client arbitrary file upload in pmupdate.php](https://junglewise.ai/threats/cve-2025-65416-docuform-managed-print-service-client-arbitrary-file-upload-in)
- [docuFORM Managed Print Service Client session fixation in login page](https://junglewise.ai/threats/cve-2025-65415-docuform-managed-print-service-client-session-fixation-in-login)