CVE-2025-30046

The record

In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes can achieve remote code execution with root privileges.  The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.

Affected packages

Related vulnerabilities

• CVE-2026-40573 NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. CWE-250
• CVE-2026-91335 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… CWE-250
• CVE-2026-104795 The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that… CWE-250
• CVE-2026-87709 Improper access control in Windows Host Guardian Service allows an authorized attacker to… CWE-250
• CVE-2026-107176 A flaw was found in the cluster-samples-operator. CWE-250
• CVE-2026-92574 A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a… CWE-250
• CVE-2026-79942 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions… CWE-250
• CVE-2026-87506 Privilege elevation in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote… CWE-250