Live › vulnerability › CVE-2025-30053
Go to dashboardThe CGM CLININET application runs a cgm-updater process that listens on a network port with no authentication. An attacker who can reach that port may be able to interact with the updater without credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running CGM CLININET up to version 2026.MS3, and potentially later versions, are affected. Systems where the cgm-updater port is reachable from untrusted networks are the most exposed. Sites where the port is firewalled to localhost or a tightly controlled admin network have a much smaller exposure.
No product ranges from the sources yet.
cgm-updater is running.cgm-updater process listens on, for example with ss -tlnp or netstat -tlnp, and whether they are reachable from the network.2026.MS3 were confirmed affected.2026.MS3 once the vendor publishes a fixed release (unknown from sources).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication.
The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
This page as .md · .json · in your agent: get_signal("CVE-2025-30053")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.