CGM CLININET's /DocManagment endpoint can be accessed without authentication, allowing any entity on the adjacent network to enumerate and download patient documents. This missing authentication flaw (CWE‑306) permits attackers to gain unintended read access to protected health information, compromising confidentiality and exposing sensitive data.

The vulnerability affects CGM CLININET deployments running revisions prior to 2026.MS3. Any instance of the product before that patch remains exposed and is likely used in hospital settings where it manages patient records.

The CVSS score of 7.1 denotes high severity, yet the EPSS score is unavailable so the exact probability of exploitation is unknown. The issue is not listed in CISA KEV, but the attack vector likely requires the adversary to be on the same or adjacent network, a realistic threat for compromised internal hosts. The potential for exposing confidential patient data necessitates prompt remediation.