CVE-2025-58406Disclosure(cgm / clininet)

LOWCVSS 4.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls.

cgm CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://cert.pl/en/posts/2026/03/CVE-2025-10350/

Other references

https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html

Weakness type (CWE)

CWE-693

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

clininet

Threat summary

5 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 1d ago at 4 mentions (2026-03-02); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

cgm

Products

clininet

Deep dive

Activity timeline5 mentions / 2d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-02	4	Disclosure3General1
2026-03-09	1	Disclosure1

Full discourse5 posts

DailyCVE@dailycve213d
Disclosure
🟠 CGM CLININET, Missing Security Headers, #CVE-2025-58406 (MEDIUM) https://dailycve.com/cgm-clininet-missing-security-headers-cve-2025-58406-medium/
Post summary
The text announces CVE‑2025‑58406, noting it involves missing security headers and is rated medium severity, but it does not provide PoC, exploit code, active exploitation, patches, or false‑positive information.
0000077
166 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds220d
General
CVE-2025-58406 Missing Security Headers in CGM CLININET Exposing Users to Client-Side Attacks https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-58406
Post summary
The post references CVE‑2025‑58406, noting missing security headers in CGM CLININET that could lead to client‑side attacks, but provides no further details or actionable information.
0000086
4.0K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash220d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2025-58406 - Lack of HTTP Response Headers Intel Report: https://ift.tt/bd6GljV
Post summary
An alert is issued for CVE-2025-58406, highlighting a lack of HTTP response headers, with a link to an Intel report for further details.
0000090
342 followersView on X
Infoflowcloud@infoflowcloud220d
Disclosure
🚨*CVE* CVE-2025-58406 The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe cachin… https://www.cve.org/CVERecord?id=CVE-2025-58406 ----- Traducción: CVE-2025-58406 La … http://infoflow.cloud`
Post summary
The post announces CVE-2025-58406, highlighting missing security HTTP headers that could enable client‑side attacks like clickjacking and MIME sniffing, but it does not provide a PoC, exploit, or patch information.
0000067
55 followersView on X
CVE@CVEnew220d
Disclosure
CVE-2025-58406 The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe cachin… https://www.cve.org/CVERecord?id=CVE-2025-58406
Post summary
The CVE‑2025‑58406 vulnerability in CGM CLININET arises from missing essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, and unsafe caching.
00000283
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	cgm	clininet	-	-	-

Explore more

Back to dashboard cgm CVEs clininet vulnerabilities

What researchers are saying

CVE-2025-58406

DailyCVE@dailycveDisclosure

The text announces CVE‑2025‑58406, noting it involves missing security headers and is rated medium severity, but it does not provide PoC, exploit code, active exploitation, patches, or false‑positive information.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The post references CVE‑2025‑58406, noting missing security headers in CGM CLININET that could lead to client‑side attacks, but provides no further details or actionable information.

CyberDudeBivash® | Global Cybersecurity Company@cyberbivashDisclosure

An alert is issued for CVE-2025-58406, highlighting a lack of HTTP response headers, with a link to an Intel report for further details.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE-2025-58406, highlighting missing security HTTP headers that could enable client‑side attacks like clickjacking and MIME sniffing, but it does not provide a PoC, exploit, or patch information.

CVE@CVEnewDisclosure

The CVE‑2025‑58406 vulnerability in CGM CLININET arises from missing essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, and unsafe caching.