Live › vulnerability › CVE-2025-30043
Go to dashboardCGM CLININET exposes its /DocManagment endpoint without authentication. An attacker on the adjacent network can list and download patient documents.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
CGM CLININET deployments reachable from the adjacent network where the /DocManagment path is exposed. Sources do not say which installation settings expose the path, so unknown whether internet-facing or internal-only installs are affected. Teams not running CGM CLININET can skip it.
No product ranges from the sources yet.
2026.MS3 or later, per the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthenticated attacker in the adjacent network to retrieve the list of patient documents and download those documents.
This issue was fixed in version 2026.MS3
This page as .md · .json · in your agent: get_signal("CVE-2025-30043")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.