Advisories · Technology

MedDream PACS Premium.

Every CVE that names MedDream PACS Premium among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-54817 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-53516 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-54495 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-54157 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-54778 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-46270 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-55071 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-54852 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-54814 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-54861 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-57881 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-58080 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-53854 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-57787 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-53707 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-54853 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-57786 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-44000 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-58095 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-58094 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-58093 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-58092 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-58091 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-58090 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-58089 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-58088 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-58087 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-36556 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 20 Jan 2026
CVE-2025-53912 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

External control of a file path in MedDream PACS Premium
- MedDream PACS Premium
- Path traversal
Not analysed yet 20 Jan 2026
CVE-2025-26469 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Incorrect permission assignment in MedDream PACS Premium
- MedDream PACS Premium
- Broken access control
Not analysed yet 28 Jul 2025
CVE-2025-27724 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Improper access control in MedDream PACS Premium
- MedDream PACS Premium
- Broken access control
Not analysed yet 28 Jul 2025
CVE-2025-32731 CVE record

CVSS 6.1 Medium

Cross-site scripting in MedDream PACS Premium
- MedDream PACS Premium
- Cross-site scripting (XSS)
Not analysed yet 28 Jul 2025
CVE-2025-24485 CVE record

CVSS 5.8 Medium

Server-side request forgery in MedDream PACS Premium
- MedDream PACS Premium
- Server-side request forgery (SSRF)
Not analysed yet 28 Jul 2025