Password Security Flaw in CGM Clininet Application from CGM
CVE-2025-30049

8.2HIGH

Key Information:

Vendor

Cgm

Status
Cgm Clininet
Vendor
CVE Published:
23 October 2026

What is CVE-2025-30049?

The CGM Clininet application has a significant vulnerability where it stores user passwords using unsalted MD5 hashes, which can be easily compromised through various attack methods. This flaw poses a serious risk to user accounts and sensitive information. The issue has been addressed in versions 2026.MS1 and 2026.MS3, highlighting the importance of updating to safeguard against potential intrusions.

Affected Version(s)

CGM CLININET 0 < 2026.MS1

CGM CLININET 0 < 2026.MS3

References

https://cert.pl/en/posts/2026/10/CVE-2025-30043/
third-party-advisory
https://www.cgm.com/pol_pl/products/szpital/cgm-clininet....
product

CVSS V4

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Maciej Kazulak
.