CVE-2025-30039

Unauthenticated access to the “/cgi-bin/CliniNET.prd/GetActiveSessions.pl” endpoint allows takeover of any user session logged into the system, including users with admin privileges.

More information : https://cert.pl/en/posts/2025/08/CVE-2025-2313/