Vulnerability in Cgm Clininet
CVE-2025-30049
The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- cert.pl/en/posts/2026/10/CVE-2025-30043/ (third-party-advisory)
- www.cgm.com/pol_pl/products/szpital/cgm-clininet.html (product)