CVE-2025-1537

Summary

CVE-2025-1537 is a critical vulnerability identified in Harpia DiagSystem 12. This issue is linked to the processing of the file /diagsystem/PACS/atualatendimento_jpeg.php, where an sql injection can occur due to the manipulation of the argument codexame. The exploit, which allows remote attack, has been publicly disclosed, increasing the risk for potential exploitation. Despite early notification, the vendor has not taken any action to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.