CVE-2025-30050 Remote Code Execution in CGM CLININET
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2025-30050?
CVE-2025-30050 is a critical vulnerability in CGM CLININET, published on 23 Oct 2026.
Official description
CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user. An attacker from adjacent network can supply a crafted query parameter to have an attacker-controlled module imported which results in arbitrary code execution with root privileges.
This issue was fixed in version 2026.MS3
Weakness: CWE-94
Which versions are affected by CVE-2025-30050?
How do I fix CVE-2025-30050?
No fix has been published for CVE-2025-30050 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-30050 being exploited?
There is no known exploitation of CVE-2025-30050 in the wild and no public exploit code.
Sources
Also known as GHSA-cwv2-4c7h-2v4g.