CVE-2025-30056: Cgm Clininet

Critical severity, CVSS 9.4. EPSS: 0.2% chance of exploitation in the next 30 days.

The RunCommand function accepts any parameter, which is then passed for execution in the shell. This allows an attacker to execute arbitrary code on the system.

Affected products

• Cgm Cgm Clininet: before 2024.MS4.33 (fixed in 2024.MS4.33)

Published 2025-08-27. Last modified 2026-06-17.