CVE-2025-30046 Remote Code Execution in CGM CLININET
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2025-30046?
CVE-2025-30046 is a critical vulnerability in CGM CLININET, published on 23 Oct 2026.
Official description
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes can achieve remote code execution with root privileges.
The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
Weakness: CWE-250
Which versions are affected by CVE-2025-30046?
How do I fix CVE-2025-30046?
No fix has been published for CVE-2025-30046 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-30046 being exploited?
There is no known exploitation of CVE-2025-30046 in the wild and no public exploit code.
Sources
Also known as GHSA-q872-9p8m-4vww.