https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-32731.htmlhttps://patchthecve.com/cve/CVE-2025-32731.htmlWed, 17 Jun 2026 09:12:30 +0000MEDIUM 6.1: A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7.3.5.860. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerabilityhttps://patchthecve.com/cve/CVE-2025-27724.htmlhttps://patchthecve.com/cve/CVE-2025-27724.htmlWed, 17 Jun 2026 09:04:07 +0000CRITICAL 9.3: A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability.https://patchthecve.com/cve/CVE-2025-26469.htmlhttps://patchthecve.com/cve/CVE-2025-26469.htmlWed, 17 Jun 2026 09:01:51 +0000CRITICAL 9.3: An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840. A specially crafted application can decrypt credentials stored in a configuration-related registry key. An attacker can execute a malicious script or aphttps://patchthecve.com/cve/CVE-2025-24485.htmlhttps://patchthecve.com/cve/CVE-2025-24485.htmlWed, 17 Jun 2026 08:59:06 +0000MEDIUM 5.8: A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted HTTP request can lead to SSRF. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.https://patchthecve.com/cve/CVE-2025-3484.htmlhttps://patchthecve.com/cve/CVE-2025-3484.htmlWed, 17 Jun 2026 09:20:02 +0000CRITICAL 9.8: MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specifichttps://patchthecve.com/cve/CVE-2025-3483.htmlhttps://patchthecve.com/cve/CVE-2025-3483.htmlWed, 17 Jun 2026 09:20:02 +0000HIGH 7.8: MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specifichttps://patchthecve.com/cve/CVE-2025-3482.htmlhttps://patchthecve.com/cve/CVE-2025-3482.htmlWed, 17 Jun 2026 09:20:02 +0000HIGH 7.8: MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specifichttps://patchthecve.com/cve/CVE-2025-3481.htmlhttps://patchthecve.com/cve/CVE-2025-3481.htmlWed, 17 Jun 2026 09:20:01 +0000HIGH 7.8: MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this vulnerability. The specifichttps://patchthecve.com/cve/CVE-2025-3480.htmlhttps://patchthecve.com/cve/CVE-2025-3480.htmlWed, 17 Jun 2026 09:20:01 +0000MEDIUM 6.5: MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of MedDream WEB DICOM Viewer. Authentication is not required to exploit this vulnerab