CVE-2025-26469
BaseFortify
Publication date: 2025-07-28
Last updated on: 2025-11-03
Assigner: Talos
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| meddream | pacs_server | 7.3.2.840 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-732 | The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is due to incorrect default permissions in the CServerSettings::SetRegistryValues function of MedDream PACS Premium 7.3.3.840. It allows a specially crafted application to decrypt credentials stored in a configuration-related registry key, enabling an attacker to execute malicious scripts or applications.
How can this vulnerability impact me? :
An attacker exploiting this vulnerability can gain access to sensitive credentials by decrypting them from the registry, potentially leading to unauthorized execution of malicious scripts or applications. This can result in full compromise of confidentiality, integrity, and availability of the affected system.