CVE-2025-65418 is a directory traversal vulnerability (CWE-22) in docuFORM Managed Print Service Client 11.11c. An attacker can exploit this flaw by sending a specially crafted URL to the affected client, enabling unauthorized reading of arbitrary files on the system. The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality without affecting integrity or availability. There is no information about affected versions beyond 11.11c, no known exploits in the wild, and no vendor advisory or patch currently available.

Successful exploitation allows an unauthenticated remote attacker to read arbitrary files on the affected system, potentially exposing sensitive information. The vulnerability does not impact system integrity or availability. There are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected client and monitor for suspicious URL requests targeting the service. Avoid exposing the service to untrusted networks.