PatchTheCVEmarvell vulnerabilities
Recent CVEs affecting marvell products. 16 tracked.
marvell has 16 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 14. Most recent: 2025-07-31. Highest priority: CVE-2025-6793 (score 70/100).
- CVE-2025-8426 CRITICAL 9.4 DOWNGRADE Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service
- CVE-2025-6807 HIGH 7.5 UPGRADE Marvell QConvergeConsole getDriverTmpPath Directory Traversal Information Disclosure Vulnerability
- CVE-2025-6806 HIGH 7.5 UPGRADE Marvell QConvergeConsole decryptFile Directory Traversal Arbitrary File Write Vulnerability
- CVE-2025-6805 CRITICAL 9.1 DOWNGRADE Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability
- CVE-2025-6804 HIGH 7.5 UPGRADE Marvell QConvergeConsole compressFirmwareDumpFiles Directory Traversal Information Disclosure Vulnerability
- CVE-2025-6803 HIGH 7.5 UPGRADE Marvell QConvergeConsole compressDriverFiles Directory Traversal Information Disclosure Vulnerability
- CVE-2025-6802 CRITICAL 9.8 UPGRADE Marvell QConvergeConsole getFileFromURL Unrestricted File Upload Remote Code Execution Vulnerability
- CVE-2025-6801 HIGH 7.5 UPGRADE Marvell QConvergeConsole saveNICParamsToFile Directory Traversal Arbitrary File Write Vulnerability
- CVE-2025-6800 HIGH 7.5 UPGRADE Marvell QConvergeConsole restoreESwitchConfig Directory Traversal Information Disclosure Vulnerability
- CVE-2025-6799 HIGH 7.5 UPGRADE Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability
- CVE-2025-6798 CRITICAL 9.1 UPGRADE Marvell QConvergeConsole deleteAppFile Directory Traversal Arbitrary File Deletion Vulnerability
- CVE-2025-6797 HIGH 7.5 UPGRADE Marvell QConvergeConsole getFileUploadBytes Directory Traversal Information Disclosure Vulnerability
- CVE-2025-6796 HIGH 7.5 UPGRADE Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability
- CVE-2025-6795 HIGH 7.5 UPGRADE Marvell QConvergeConsole getFileUploadSize Directory Traversal Information Disclosure Vulnerability
- CVE-2025-6794 CRITICAL 9.8 UPGRADE Marvell QConvergeConsole saveAsText Directory Traversal Remote Code Execution Vulnerability
- CVE-2025-6793 CRITICAL 9.4 UPGRADE Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclo
FAQ
How do I fix marvell vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is marvell being exploited right now?
None of the tracked marvell CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which marvell CVE should I patch first?
CVE-2025-6793 currently ranks highest (70/100): Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclo.