PT-2026-43226 · Undefined · Undefined

Published 2026-05-25 · Updated 2026-05-25 · CVE-2018-25374

NVD

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the path parameter. Attackers can send requests to nocache.php with encoded backslash sequences to traverse directories and access sensitive files including system configuration and password files.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-25374

Affected Products

Undefined

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-25374 · Security Note
• https://vulncheck.com/advisories/softneta-meddream-pacs-server-premium-directory-traversal · Note
• https://exploit-db.com/exploits/45347 · Note
• https://softneta.com/products/meddream-pacs-server/downloads.html · Note