CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 11:10 PM ET)

What this means for you

This week: 3,265 CVEs published, 234 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,265; Show in the list
Critical, last 7 days: 234; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product meddream:pacs_server. Show all products

39 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2025-3484 Healthcare	Critical 9.8	MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Assigned by zdi	May 21, 2025
CVE-2025-3483 Healthcare	Critical 9.8	MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Assigned by zdi	May 21, 2025
CVE-2025-3482 Healthcare	Critical 9.8	MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Assigned by zdi	May 21, 2025
CVE-2025-3481 Healthcare	Critical 9.8	MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability Assigned by zdi	May 21, 2025
CVE-2025-3480 Healthcare	Medium 5.3	MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability Assigned by zdi	May 21, 2025
CVE-2025-24485 Healthcare	Medium 5.8	A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. Assigned by talos	Jul 28, 2025
CVE-2025-32731 Healthcare	Medium 6.1	A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7.3.5.860. Assigned by talos	Jul 28, 2025
CVE-2025-27724 Healthcare	Critical 9.3	A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. Assigned by talos	Jul 28, 2025
CVE-2025-26469 Healthcare	Critical 9.3	An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840. Assigned by talos	Jul 28, 2025
CVE-2025-53912 Healthcare	Critical 9.6	An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. Assigned by talos	Jan 20, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.