CVE-2025-8307

Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sector. Passwords of all users are stored in a database in an encoded format. An attacker in possession of these encoded passwords is able to decode them by using an algorithm embedded in the client-side part of the software.  This vulnerability has been fixed in versions 4.50.1 and 5.38.0

• CWE-257

• https://cert.pl/en/posts/2026/01/CVE-2025-8306/

Published

Jan 8, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8301Realtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KE…7.8
• CVE-2025-8302Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer O…8.8
• CVE-2025-8303Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-8304An authenticated local user can obtain information that allo…6.5
• CVE-2025-8305An authenticated local user can obtain information that allo…6.5
• CVE-2025-8306Asseco InfoMedica is a comprehensive solution used to manage…5.1
• CVE-2025-8308Improper Neutralization of Input During Web Page Generation …6.3
• CVE-2025-8309There is an improper privilege management vulnerability iden…8.1
• CVE-2025-8310Missing authorization in the admin console of Ivanti Virtual…8.8
• CVE-2025-8311dotCMS versions 24.03.22 and after, identified a Boolean-bas…9.4
• CVE-2025-8312Deadlock in PAM automatic check-in feature in Devolutions Se…7.1
• CVE-2025-8313The Campus Directory plugin for WordPress is vulnerable to S…6.4