{"id":"CVE-2025-30050","revision":"406df47d349e4d789c2964721cb4fce7","records":[{"revision":"406df47d349e4d789c2964721cb4fce7","observedAt":"2026-10-23T16:01:20.601+00:00","statement":{"source":"cve-program","id":"CVE-2025-30050","aliases":[],"title":"Remote Code Execution in CGM CLININET","description":"CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an attacker-controlled module imported which results in arbitrary code execution with root privileges.\n\n\nThis issue was fixed in version 2026.MS3","state":0,"publishedAt":"2026-10-23T08:22:57.175+00:00","modifiedAt":"2026-10-23T08:22:57.175+00:00","affected":[{"ecosystem":"Vendor product","name":"CGM CLININET","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"CGM\",\n                    \"product\": \"CGM CLININET\",\n                    \"modules\": [\n                        \"RunCGI.pm\"\n                    ],\n                    \"programFiles\": [\n                        \"RunCGI.pm\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"2026.MS3\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","score":9.4,"severity":"CRITICAL"}],"references":["https://cert.pl/en/posts/2026/10/CVE-2025-30043/","https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-30050","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-30050","identifiers":["CVE-2025-30050"]},"retained":false,"historicalAffected":[]}],"coverage":[]}