Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-57787 EUVD-2026-3394GHSA-g7m5-cg8g-x45r

A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A speciall…

Published Jan 20, 2026 · Updated Jan 21, 2026 · Assigned by talos

Description

A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
MedDream MedDream PACS Premium 7.3.6.870 —

References