CVE-2025-58744: Milner Imagedirector Capture

High severity, CVSS 7.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Use of Default Credentials, Hard-coded Credentials vulnerability in C2SGlobalSettings.dll in Milner ImageDirector Capture on Windows allows decryption of document archive files using credentials decrypted with hard-coded application encryption key. This issue affects ImageDirector Capture: from 7.0.9.0 before 7.6.3.25808.

Affected products

• Milner Imagedirector Capture: from 7.0.9, before 7.6.3.25808 (fixed in 7.6.3.25808)

Published 2026-01-20. Last modified 2026-06-17.