CyberSecBulletin

Ai3 vulnerabilities

We track 2 vulnerabilities in Ai3 products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 29, 2025.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Ai3 vulnerabilities

  • 7.5 High severity

    QbiCRMGateway: Relative Path Traversal

    CVE-2025-9639Ai3

    The QbiCRMGateway developed by Ai3 has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

  • 7.2 High severity

    QbiBot: Unrestricted Upload of File with Dangerous Type

    CVE-2024-3778Ai3

    The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attackers with administrator privilege to upload files with dangerous type containing malicious code.