High severity7.5NVD Advisory· Published May 25, 2026· Updated May 26, 2026
CVE-2018-25374
CVE-2018-25374
Description
Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the path parameter. Attackers can send requests to nocache.php with encoded backslash sequences to traverse directories and access sensitive files including system configuration and password files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: =6.7.1.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.