Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-27724 EUVD-2025-22911GHSA-55cp-gfwj-549w

A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted…

Published Jul 28, 2025 · Updated Nov 3, 2025 · Assigned by talos

Description

A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
MedDream MedDream PACS Premium 7.3.3.840 —

References