CVE-2025-30039: Cgm Clininet

Critical severity, CVSS 9.0. EPSS: 0.2% chance of exploitation in the next 30 days.

Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session logged into the system, including users with admin privileges.

Affected products

• Cgm Cgm Clininet: before 2024.MS4 (fixed in 2024.MS4)

Published 2025-08-27. Last modified 2026-06-17.