CVE-2025-1575

Summary

CVE-2025-1575 is a newly disclosed vulnerability affecting Harpia DiagSystem 12. The issue lies within an unidentified function of the file /diagsystem/PACS/atualatendimento_jpeg.php, where the argument cod/codexame is manipulable, resulting in improper control of resource identifiers. This vulnerability can be exploited remotely, and the exploit has already been made public. Despite early contact, the vendor has not responded to the disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.