CVE-2025-65416 identifies an arbitrary file upload vulnerability in docuFORM Managed Print Service Client 11.11c via the pmupdate.php script. This vulnerability allows unauthorized file uploads, potentially leading to unauthorized code execution or system compromise depending on the environment and file handling. No CVSS score or patch information is currently available, and no exploits are known to be active in the wild.

The vulnerability permits arbitrary file uploads, which could be leveraged by an attacker to place malicious files on the affected system. Without further details or confirmed exploitation, the exact impact remains unclear. No known active exploitation has been reported, and the absence of a CVSS score limits precise impact assessment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the pmupdate.php endpoint and monitor for suspicious file upload activity if possible. Avoid exposing the affected service to untrusted networks.