CVE-2025-58742: Milner Imagedirector Capture

Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days.

Insufficiently Protected Credentials, Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Connection Settings dialog in Milner ImageDirector Capture on Windows allows Adversary in the Middle (AiTM) by modifying the 'Server' field to redirect client authentication.This issue affects ImageDirector Capture: from 7.0.9 before 7.6.3.25808.

Affected products

• Milner Imagedirector Capture: from 7.0.9, before 7.6.3.25808 (fixed in 7.6.3.25808)

Published 2026-01-20. Last modified 2026-06-17.