CVE-2025-30050
Remote Code Execution in CGM CLININET
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an attacker-controlled module imported which results in arbitrary code execution with root privileges. This issue was fixed in version 2026.MS3
| CWE | CWE-94 |
| Vendor | cgm |
| Product | cgm clininet |
| Published | Oct 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for cgm cgm clininet
Be the first to know when new unknown vulnerabilities affecting cgm cgm clininet are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
CGM / CGM CLININET
0 < 2026.MS3