PatchTheCVEmeddream vulnerabilities
Recent CVEs affecting meddream products. 9 tracked.
meddream has 9 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-07-28. Highest priority: CVE-2025-3484 (score 55/100).
- CVE-2025-3484 CRITICAL 9.8 UPGRADE MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-3483 HIGH 7.8 UPGRADE MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-3482 HIGH 7.8 UPGRADE MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-3481 HIGH 7.8 UPGRADE MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-3480 MEDIUM 6.5 DOWNGRADE MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability
- CVE-2025-32731 MEDIUM 6.1 DOWNGRADE A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of me
- CVE-2025-27724 CRITICAL 9.3 DOWNGRADE A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7
- CVE-2025-26469 CRITICAL 9.3 DOWNGRADE An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality
- CVE-2025-24485 MEDIUM 5.8 DOWNGRADE A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3
FAQ
How do I fix meddream vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is meddream being exploited right now?
None of the tracked meddream CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which meddream CVE should I patch first?
CVE-2025-3484 currently ranks highest (55/100): MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.