MEDIUMCVSS 6.9

CVE-2025-30053

CVE-2025-30053 updated by NVD

Published: 2026-10-23
Modified: 2026-11-06
Sources: euvd, nvd

Summary

The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. The vulnerability was confirmed to affect versions up to 2026.MS3. Version 2026.MS3 with the updater-upkg component in version 5.3.0 or higher is not affected by this vulnerability.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-30053

Includes data from the ENISA EU Vulnerability Database (EUVD).

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.