https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T14:57:46.335046+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2025-30050 fkie_cve-2025-30050 2026-10-24T14:57:46.364921+00:00

CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an attacker-controlled module imported which results in arbitrary code execution with root privileges.

This issue was fixed in version 2026.MS3

 https://db.gcve.eu/vuln/ghsa-cwv2-4c7h-2v4g GHSA-cwv2-4c7h-2v4g 2026-10-24T14:57:46.365193+00:00

CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an attacker-controlled module imported which results in arbitrary code execution with root privileges.

This issue was fixed in version 2026.MS3