CVE-2025-30043High· 7.1▾ TwilightCGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthenticated attacker in the adjacent network to retrieve the list of…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthenticated attacker in the adjacent network to retrieve the list of patient documents and download those documents.
This issue was fixed in version 2026.MS3
clininet < 2026.MS3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-30053Medium· 6.9Missing Authentication in CGM CLININET
CVE-2025-30046Critical· 9.0Remote Code Execution in CGM CLININET
CVE-2025-30049High· 8.2Use of Unsalted MD5 Password Hashes in CGM CLININET
CVE-2025-30045High· 8.6Code Injection in CGM CLININET
CVE-2025-30050Critical· 9.4Remote Code Execution in CGM CLININET
CVE-2025-30047Critical· 9.4Remote Code Execution via Java Deserialization in CGM CLININET