CVE-2025-10350 — SQL injection in CGM NETRAAD
SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, includin…
Published: 2026-03-02 · CVSS: 8.8 · CVSS 4.0
SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7