An incorrect default permissions vulnerability exists in the CServerSettingsSetRegistryValues

链接： https://github.com/advisories/GHSA-798q-fhcc-4r5j

CVSS 评分： 9.4

参考链接：

• https://nvd.nist.gov/vuln/detail/CVE-2025-26469

• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2154

• https://github.com/advisories/GHSA-798q-fhcc-4r5j

描述：

An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840.
A specially crafted application can decrypt credentials stored in a configuration-related registry key.
An attacker can execute a malicious script or application to exploit this vulnerability.