Skip to content
OpenAdvisories
Critical · 9.6 CVE-2025-53912 EUVD-2026-3397GHSA-9phm-h7g8-7qwh

An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HT…

Published Jan 20, 2026 · Updated Jan 20, 2026 · Assigned by talos

Vendor: MedDream Product: MedDream PACS Premium

Description

An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send http request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
MedDream MedDream PACS Premium 7.3.6.870 —

References