9.6
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Description
An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send http request to trigger this vulnerability.
AI Analysis
Arbitrary file read vulnerability in MedDream PACS Premium via specially crafted HTTP request
Basic Information
ID
CVE-2025-53912
Source
talos
Published
Jan 20, 2026 at 14:49
Modified
Jan 20, 2026 at 15:09
Affected Product
Vendor
MedDream
Product
MedDream PACS Premium
Version
7.3.6.870
Affected Versions
MedDream MedDream PACS Premium 7.3.6.870
CWE Classification
AI Assessment
AI Score
9.6 / 10
AI Severity
Critical
Vendor
MedDream
Product
MedDream PACS Premium
Version
7.3.6.870