CVE-2025-8857: Changing Clinic Image System

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credentials embedded in the source code.

Affected products

• Changing Clinic Image System: up to and including 2.4.23.2131

Published 2025-08-29. Last modified 2026-06-17.