CVE-2025-10350
High
Description
SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9.0.
SeverityHigh
CVSS8.8
Exploit probability—
ProductCGM NETRAAD
PublishedMar 2, 2026
First seenMar 2, 2026
Weakness typeCWE-89SQL injection
How to fix
Update
- CGM CGM NETRAAD7.9.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| CGM CGM NETRAAD | v < 7.9.0 | 7.9.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.