MedDream vulnerabilities
We track 8 vulnerabilities in MedDream products across 2 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on January 20, 2026.
Latest MedDream vulnerabilities
- 8.1 High severity
MedDream PACS Premium: External Control of File Name or Path
An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send http request to trigger this vulnerability.
- 9.8 Critical severity
MedDream PACS Premium: Improper Access Control
A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability.
- 9.8 Critical severity
MedDream PACS Premium: Incorrect Permission Assignment for Critical Resource
An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840. A specially crafted application can decrypt credentials stored in a configuration-related registry key. An attacke
- 7.5 High severity
MedDream PACS Premium: Server-Side Request Forgery
A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted HTTP request can lead to SSRF. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
- 9.8 Critical severity
PACS Server: Stack-based Buffer Overflow
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to e
- 7.8 High severity
PACS Server: Stack-based Buffer Overflow
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to e
- 7.8 High severity
PACS Server: Stack-based Buffer Overflow
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to e
- 7.8 High severity
PACS Server: Stack-based Buffer Overflow
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to e