Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-2264

67
FAUCET Score

CVE-2025-2264 is a critical Path Traversal Information Disclosure vulnerability affecting Sante PACS Server.exe, allowing unauthenticated remote attackers to download arbitrary files from the server's disk. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction, leading to significant information disclosure. Although not yet on the KEV catalog, exploit modules exist in Metasploit and Nuclei, and community discussion is very active, indicating a high likelihood of future exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
4.1.0CPE matchmatch criteria
cpe:2.3:a:santesoft:sante_pacs_server:4.1.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
38.66%
Probability of exploitation in next 30 days
EPSS Percentile
98.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
Metasploit: Sante PACS Server Path Traversal (CVE-2025-2264) · Mar 13, 2025
Nuclei: CVE-2025-2264 · Apr 9, 2025
This CVE's current EPSS score of 0.3866 is in the 97th percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (4)

azurevendor investigatingvia llm_extracted
dotnetvendor investigatingvia llm_extracted
langgeniusvendor investigatingvia llm_extracted
phoenix_contactvendor investigatingvia llm_extracted

Vendor Advisories (4)

langgeniusllm-langgenius-ec9256d13ee062b9CRITICAL

Multiple Vulnerabilities in Sante PACS Server

Mar 13, 2025
dotnetllm-dotnet-57c3c6ade4920c56CRITICAL

Multiple Vulnerabilities in Sante PACS Server

Mar 13, 2025
azurellm-azure-e5a889a678a4f11dCRITICAL

Multiple Vulnerabilities in Sante PACS Server

Mar 13, 2025
phoenix_contactllm-phoenix_contact-4ee81f8a613c7cfbCRITICAL

Multiple Vulnerabilities in Sante PACS Server

Mar 13, 2025

References

tenable.com / security/research/tra-2025-08
ExploitThird Party Advisory