https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:22:28.573479+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-30040 CVE-2025-30040 — Missing authentication in API returning request logs containing session IDs 2026-10-08T18:22:28.595747+00:00

Affected: CGM CLININET

The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint.