CVE-2025-12996
Medium · 4.1CVSS
4.1
EPSS
0.1%
Published
Dec 4, 2025
CISA due date
—
The record
Medtronic CareLink Network allows a local attacker with access to log files on an internal API server to view plaintext passwords from errors logged under certain circumstances. This issue affects CareLink Network: before December 4, 2025.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|