CVE-2018-25365: Pcviewer

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

PCViewer vt1000 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting relative path sequences in GET requests. Attackers can use path traversal sequences ../../../../../../../../../../../../etc/passwd to access sensitive system files outside the intended directory.

Affected products

• Pcviewer Pcviewer

Published 2026-05-25. Last modified 2026-07-23.