CVE-2025-30046
In the CGM CLININET application server, multiple processes responsible for HL7 communication with…
- Risk score
- 58/100
- CVSS
- 9.0 v4.0
- Exploit chance (30 days)
- 0.3%
- Published
- 23 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes can achieve remote cod…
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 9.0 critical
References
Original description
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes can achieve remote code execution with root privileges. The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
Last activity 23 Oct 2026. Patch Forecast updates every hour.