Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-26469 EUVD-2025-22910GHSA-798q-fhcc-4r5j

An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.…

Published Jul 28, 2025 · Updated Nov 3, 2025 · Assigned by talos

Description

An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840.
A specially crafted application can decrypt credentials stored in a configuration-related registry key.
An attacker can execute a malicious script or application to exploit this vulnerability.

Affected products

VendorProductAffectedFixed
MedDream MedDream PACS Premium 7.3.3.840 —

References