PT-2026-39613 · Unknown · Docuform Managed Print Service Client

Published 2026-05-11 · Updated 2026-05-11 · CVE-2025-65416

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions docuFORM Managed Print Service Client version 11.11c

Description An arbitrary file upload issue exists via the 'pmupdate.php' endpoint, allowing an attacker to upload files to the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2025-65416

Affected Products

Docuform Managed Print Service Client

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-65416 · Security Note
• https://twitter.com/VulmonFeeds/status/2053969390173888626 · Twitter Post
• https://docuform.de · Note
• https://gist.github.com/ZeroBreach-GmbH/f94cad5b37f718d1b1cfee6ca0fe666b · Note
• https://zerobreach.de · Note
• https://twitter.com/CVEnew/status/2053954535895228472 · Twitter Post