Critical severity9.3NVD Advisory· Published Jul 28, 2025· Updated Jun 17, 2026
CVE-2025-27724
CVE-2025-27724
Description
A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:meddream:pacs_server:7.3.2.840:*:*:*:premium:*:*:*
= 7.3.3.840+ 1 more
- (no CPE)range: = 7.3.3.840
- (no CPE)range: 7.3.3.840
Patches
Vulnerability mechanics
References
2- talosintelligence.com/vulnerability_reports/TALOS-2025-2156nvdExploitThird Party Advisory
- www.talosintelligence.com/vulnerability_reports/TALOS-2025-2156nvd
News mentions
0No linked articles in our index yet.