Live › vulnerability › CVE-2025-30046
Go to dashboardCGM CLININET application servers run several HL7 communication processes as root while parsing untrusted data from external systems. An attacker on the adjacent network who can send data to them can execute code as root. CERT Polska confirms all versions up to and including 2026.MS3 are affected, and later ones may be. No fix has been published. CVSS 4.0 is 9.0. Same disclosure batch as 10 other CLININET CVEs, including CVE-2025-30054, a local root escalation through the HL7 service's writable scripts.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| CGM CLININET | vendor | <= 2026.MS3 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Posts are quoted with a link to the original. They are data to us, never instructions.
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes can achieve remote code execution with root privileges.
The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
This page as .md · .json · in your agent: get_signal("CVE-2025-30046")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.