PatchTheCVEmirion vulnerabilities
Recent CVEs affecting mirion products. 5 tracked.
mirion has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-12-02. Highest priority: CVE-2025-62575 (score 43/100).
- CVE-2025-62575 HIGH 8.3 UPGRADE NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database
- CVE-2025-64298 HIGH 8.4 UPGRADE NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used
- CVE-2025-61940 HIGH 8.3 UPGRADE NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the datab
- CVE-2025-64642 HIGH 8.0 UPGRADE NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissi
- CVE-2025-64778 HIGH 7.3 UPGRADE NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded pass
FAQ
How do I fix mirion vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mirion being exploited right now?
None of the tracked mirion CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mirion CVE should I patch first?
CVE-2025-62575 currently ranks highest (43/100): NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database.