Description
In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes can achieve remote code execution with root privileges. 


The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
Published: 2026-10-23
Score: 9 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote code execution with root privileges in the CGM CLININET application server.
Action: Immediate Patch
AI Analysis

Impact

Untrusted HL7 data received from external systems is processed by multiple server processes that run with root privileges. The vulnerability allows an attacker able to send crafted HL7 messages from an adjacent network to those processes to execute arbitrary code with system level privileges, as defined by CWE-250.

Affected Systems

CGM CLININET application server is affected. Versions up to 2026.MS3 are confirmed vulnerable; later releases may also be impacted. The product runs on the CGM platform and handles HL7 communication with external medical systems.

Risk and Exploitability

The CVSS score of 9 indicates critical severity. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog, but the nature of the flaw implies it can be actively exploited by an attacker who can reach the HL7 interface. The attack vector is inferred to be over the network where HL7 messages are sent, and the attacker must be able to inject malicious data into those messages.

Generated by OpenCVE AI on October 23, 2026 at 09:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply any vendor‑supplied patch or upgrade to a version newer than 2026.MS3 as soon as it becomes available.
  • Restrict network access to the HL7 ports so that only trusted, internal systems can send messages to the CLININET server.
  • Reconfigure the HL7 communication processes to run with non‑root privileges or disable them temporarily until a fixed version is deployed.

Generated by OpenCVE AI on October 23, 2026 at 09:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 28 Oct 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 23 Oct 2026 08:45:00 +0000

Type Values Removed Values Added
Description In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received from those external systems. An attacker in adjacent network able to send data to these HL7 communication processes can achieve remote code execution with root privileges.  The vulnerability was confirmed to affect versions up to 2026.MS3 but later versions may also be vulnerable.
Title Remote Code Execution in CGM CLININET
First Time appeared Cgm
Cgm cgm Clininet
Weaknesses CWE-250
CPEs cpe:2.3:a:cgm:cgm_clininet:*:*:*:*:*:*:*:*
Vendors & Products Cgm
Cgm cgm Clininet
References
Metrics cvssV4_0

{'score': 9, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}

Subscriptions

Cgm Cgm Clininet
cve-icon MITRE

Status: PUBLISHED

Assigner: CERT-PL

Published:

Updated: 2026-10-28T20:03:37.137Z

Reserved: 2025-03-14T14:55:05.983Z

Link: CVE-2025-30046

cve-icon Vulnrichment

Updated: 2026-10-28T17:53:28.443Z

cve-icon NVD

Status : Deferred

Published: 2026-10-23T09:17:04.450

Modified: 2026-10-28T20:17:15.810

Link: CVE-2025-30046

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T10:00:15Z

Weaknesses
  • CWE-250

    Execution with Unnecessary Privileges