Detections
Analytics
CVE-2025-26469
critical
Description
An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840. A specially crafted application can decrypt credentials stored in a configuration-related registry key. An attacker can execute a malicious script or application to exploit this vulnerability.
References
https://blog.talosintelligence.com/wwbn-meddream-eclipse-vulnerabilities/
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2154
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2154