Medium severity4.3NVD Advisory· Published Mar 2, 2026· Updated Jun 17, 2026

CVE-2025-58406

Description

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

CGM/CLININET3 versions
cpe:2.3:a:cgm:clininet:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:cgm:clininet:*:*:*:*:*:*:*:*range: <2025.ms3
- (no CPE)
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

cert.pl/en/posts/2026/03/CVE-2025-10350/nvdThird Party Advisory
www.cgm.com/pol_pl/products/szpital/cgm-clininet.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000