PT-2026-22576 · Cgm · Cgm Clininet

Maciej Kazulak · Published 2026-03-02 · Updated 2026-03-02 · CVE-2025-30062

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The validateOrgUnit function within the "CheckUnitCodeAndKey.pl" service is susceptible to SQL injection. The service is accessible via “https://t.co/CNKLxQieDl” and “https://t.co/kFecmEiCTo”. The validateOrgUnit function is the specific component at risk. SQL injection occurs when malicious SQL code is inserted into an entry field for execution. This can allow attackers to bypass security measures and gain unauthorized access to sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-30062

Affected Products

Cgm Clininet

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-30062 · Security Note
• https://cgm.com/pol_pl/products/szpital/cgm-clininet.html · Note
• https://twitter.com/VulmonFeeds/status/2028471087617511788 · Twitter Post
• https://t.me/cveNotify/153713 · Telegram Post
• https://t.me/CVEtracker/46113 · Telegram Post
• https://cert.pl/en/posts/2026/03/CVE-2025-10350 · Note
• https://twitter.com/CVEnew/status/2028437080440033469 · Twitter Post