Vulnerabilitymedium

WWBN, MedDream, Eclipse vulnerabilities

Cisco TalosAug 6, 2025 · 12:00 UTC (Aug 6, 2025)2 min read1 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-46410 CVE-2025-53084 CVE-2025-50128 CVE-2025-36548 CVE-2025-41420 CVE-2025-25214 CVE-2025-48732 CVE-2025-26469 CVE-2025-27724 CVE-2025-32731 CVE-2025-24485

Tags: cve-2025-46410 cve-2025-53084 cve-2025-50128 cve-2025-36548 cve-2025-41420 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-26469 +3 related CVEs CVE-2025-27724 CVE-2025-24485 CVE-2025-32731	An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840	9.8 group max	<1%	PoC	Jul 28, 2025
CVE-2025-48732 +6 related CVEs CVE-2025-41420 CVE-2025-36548 CVE-2025-25214 CVE-2025-46410 CVE-2025-50128 CVE-2025-53084	An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff	9.8 group max	1%	PoC	Jul 24, 2025

From the original article

2 min read at blog.talosintelligence.com

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed seven vulnerabilities in WWBN AVideo, four in MedDream, and one in an Eclipse ThreadX module. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco’s third-party vulnerability disclosure policy .

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.