CVE-2025-7146 HIGH

CVE-2025-7146: Jhenggao iPublish System - Arbitrary File Reading through Path Traversal

Vendor Jhenggao

Product iPublish System

Weakness CWE-23

Published July 8, 2025

Last update July 8, 2025

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

The iPublish System developed by Jhenggao has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to read arbitrary system file.

Key dates

02Disclosure timeline

July 8, 2025 CVE published

July 8, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-7146

Related vulnerabilities

04Related CVE

CVE-2020-3597 Cisco Nexus Data Broker Software Path Traversal Vulnerability CVE-2024-30010 Windows Hyper-V Remote Code Execution Vulnerability CVE-2025-11898 Flowring Technology｜Agentflow - Arbitrary File Reading through Path Traversal CVE-2026-43616 Detect-It-Easy < 3.21 Path Traversal Arbitrary File Write CVE-2025-23410 GMOD Apollo Relative Path Traversal