Meddream vulnerabilities
40 CVEs and advisories name Meddream as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-53912An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870.
- CVE-2025-26469An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3
- CVE-2025-27724A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840.
- CVE-2025-32731A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7
- CVE-2025-24485A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860.
- CVE-2025-3480MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability
- CVE-2025-3481MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-3482MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-3483MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-3484MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability