CVE-2025-58406: Cgm Clininet

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls.

Affected products

• Cgm Clininet: before 2025.ms3 (fixed in 2025.ms3)

Published 2026-03-02. Last modified 2026-06-17.