CVE-2025-53912

CRITICAL

MedDream PACS Premium <7.3.6.870 - Info Disclosure

Title source: llm

Description

An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send http request to trigger this vulnerability.

References (2)

Scores

CVSS v3 9.6
EPSS 0.0020
EPSS Percentile 42.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Classification

CWE
CWE-73
Status published

Affected Products (1)

meddream/pacs_server

Timeline

Published Jan 20, 2026
Tracked Since Feb 18, 2026