PatchTheCVEcgm vulnerabilities
Recent CVEs affecting cgm products. 4 tracked.
cgm has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-03-02. Highest priority: CVE-2025-58402 (score 34/100).
- CVE-2025-58406 MEDIUM 4.3 UPGRADE The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side at
- CVE-2025-58405 MEDIUM 6.1 UPGRADE The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP
- CVE-2025-58402 HIGH 7.5 UPGRADE The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorizati
- CVE-2025-30042 HIGH 7.8 UPGRADE The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on th
FAQ
How do I fix cgm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cgm being exploited right now?
None of the tracked cgm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cgm CVE should I patch first?
CVE-2025-58402 currently ranks highest (34/100): The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorizati.