PatchSiren cyber security CVE debrief
CVE-2018-25374 Softneta CVE debrief
A directory traversal vulnerability in Softneta MedDream PACS Server Premium 6.7.1.1 allows unauthenticated remote attackers to read arbitrary files via path manipulation in nocache.php. The vulnerability is exploitable through encoded backslash sequences that bypass path validation, enabling access to sensitive system files including configuration and password files. The CVSS 4.0 vector indicates network attack vector with low attack complexity, no privileges required, and high confidentiality impact. The CVE was published on 2026-05-25 and modified on 2026-05-26. No known exploitation in ransomware campaigns has been documented, and the vulnerability is not listed in CISA KEV.
- Vendor
- Softneta
- Product
- MedDream PACS Server Premium
- CVSS
- HIGH 8.7
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-05-25
- Original CVE updated
- 2026-05-26
- Advisory published
- 2026-05-25
- Advisory updated
- 2026-05-26
Who should care
Healthcare organizations operating Softneta MedDream PACS Server Premium; medical imaging departments; healthcare IT security teams; HIPAA compliance officers; vulnerability management programs in healthcare sector
Technical summary
The vulnerability exists in nocache.php where insufficient input validation on the path parameter allows directory traversal using encoded backslash sequences. Attackers can construct requests that escape the intended web root and access arbitrary files on the underlying file system. The attack requires no authentication and can be executed remotely with low complexity. Successful exploitation results in high confidentiality impact through unauthorized disclosure of sensitive files.
Defensive priority
HIGH
Recommended defensive actions
- Apply vendor-supplied patches for MedDream PACS Server Premium to version 6.7.1.1 or later
- Implement network segmentation to restrict access to PACS server management interfaces
- Deploy Web Application Firewall (WAF) rules to detect and block path traversal patterns including encoded backslash sequences
- Review and restrict file system permissions to prevent web server processes from accessing sensitive configuration files
- Monitor access logs for nocache.php requests containing suspicious path parameters
- Conduct file integrity monitoring on critical system configuration files
- Disable or restrict access to nocache.php if not required for operations pending patch application
Evidence notes
Vulnerability confirmed through official NVD record with CVSS 4.0 scoring. Advisory published by VulnCheck with technical details. Exploit-DB reference indicates public disclosure of exploitation technique. Vendor download page referenced for affected product version identification.
Official resources
2026-05-25T15:16:20.403Z