CVE-2025-26469 — AI Deep Analysis Summary

Q: Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-732** (Incorrect Permission Assignment). ❌ **Flaw**: The `CServerSettings::SetRegistryValues` function assigns overly permissive default rights. It fails to restrict access properly.

Q: Who is affected? (Versions/Components)

🏥 **Affected Vendor**: MedDream. 💻 **Product**: MedDream PACS Premium. 📉 **Version**: Specifically **7.3.3.840**. Check your installation version immediately!

Q: Is there a public Exp? (PoC/Wild Exploitation)

🕵️ **Public Exploit**: **No**. 📄 **PoC**: The `pocs` field is empty. 📢 **Status**: No public Proof-of-Concept or wild exploitation detected yet. Stay alert!

Q: How to self-check? (Features/Scanning)

🔍 **Self-Check**: 1️⃣ Verify version is **7.3.3.840**. 2️⃣ Scan for `CServerSettings::SetRegistryValues` misconfigurations. 3️⃣ Check registry permissions for overly broad access rights.

Q: Is it fixed officially? (Patch/Mitigation)

🛠️ **Official Fix**: **Unknown/Not Listed**. 📝 **Mitigation**: The data does not list a specific patch. Refer to the vendor's security advisory (Talos Intelligence report) for updates.

Q: Is it urgent? (Priority Suggestion)

🔴 **Urgency**: **HIGH**. 📈 **Priority**: Critical due to **CVSS 9.8** (implied by C:H/I:H/A:H). ⏳ **Action**: Patch immediately or apply strict permission mitigations. Medical data is at risk!

Updated May 06, 2026 CVSS 9.3 · Critical

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: MedDream PACS Premium has a critical security flaw. <br>🔥 **Consequences**: Default permissions are wrong. This leads to **credential decryption**.…

Read full answer (login)

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-732** (Incorrect Permission Assignment). <br>❌ **Flaw**: The `CServerSettings::SetRegistryValues` function assigns overly permissive default rights. It fails to restrict access properly.

Q3Who is affected? (Versions/Components)

🏥 **Affected Vendor**: MedDream. <br>💻 **Product**: MedDream PACS Premium. <br>📉 **Version**: Specifically **7.3.3.840**. Check your installation version immediately!

Q4What can hackers do? (Privileges/Data)

💀 **Attacker Actions**: <br>1️⃣ **Decrypt Credentials**: Access stored passwords. <br>2️⃣ **Full Control**: High impact on Confidentiality, Integrity, and Availability.…

Read full answer (login)

Q5Is exploitation threshold high? (Auth/Config)

⚠️ **Exploitation Threshold**: **LOW**. <br>🔑 **Auth**: **PR:N** (No Privileges Required). <br>🎯 **Access**: **AV:L** (Local) & **AC:L** (Low Complexity). <br>👤 **UI**: **UI:N** (No User Interaction).…

Read full answer (login)

Q6Is there a public Exp? (PoC/Wild Exploitation)

🕵️ **Public Exploit**: **No**. <br>📄 **PoC**: The `pocs` field is empty. <br>📢 **Status**: No public Proof-of-Concept or wild exploitation detected yet. Stay alert!

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: <br>1️⃣ Verify version is **7.3.3.840**. <br>2️⃣ Scan for `CServerSettings::SetRegistryValues` misconfigurations. <br>3️⃣ Check registry permissions for overly broad access rights.

Q8Is it fixed officially? (Patch/Mitigation)

🛠️ **Official Fix**: **Unknown/Not Listed**. <br>📝 **Mitigation**: The data does not list a specific patch. Refer to the vendor's security advisory (Talos Intelligence report) for updates.

Q9What if no patch? (Workaround)

🚧 **Workaround**: <br>🔒 **Restrict Permissions**: Manually audit `SetRegistryValues` permissions. <br>🚫 **Limit Access**: Restrict local access to the server.…

Read full answer (login)

Q10Is it urgent? (Priority Suggestion)

🔴 **Urgency**: **HIGH**. <br>📈 **Priority**: Critical due to **CVSS 9.8** (implied by C:H/I:H/A:H). <br>⏳ **Action**: Patch immediately or apply strict permission mitigations. Medical data is at risk!

Continue exploring

Vulnerability detail Full AI analysis (login) MedDream CWE-732