CVE-2025-30049
NoneCVSS
—
EPSS
0.2%
Published
Oct 23, 2026
CISA due date
—
The record
The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-13576 CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1… CWE-916
- CVE-2026-118991 CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded… CWE-916
- CVE-2026-65629 Use of Password Hash With Insufficient Computational Effort in the jose library allows an… CWE-916
- CVE-2026-116054 A security vulnerability has been detected in SH3. CWE-916
- CVE-2026-116071 rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to… CWE-916
- CVE-2026-112026 A security vulnerability has been detected in light0011 cms… CWE-916
- CVE-2026-86670 A flaw has been found in aircheng-org iWebShop-5 up to 5.15. CWE-916
- CVE-2026-81704 openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the… CWE-916