CVE-2025-26469 – MedDream PACS Premium Default Permissions Leakage

CVE ID : CVE-2025-26469

Published : July 28, 2025, 2:15 p.m. | 1 hour, 5 minutes ago

Description : An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840.
A specially crafted application can decrypt credentials stored in a configuration-related registry key.
An attacker can execute a malicious script or application to exploit this vulnerability.

Severity: 9.3 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…