A critical privilege escalation vulnerability exists in the login.php functionality of MedDream PACS Premium version 7.3.3.840. This flaw allows an attacker to upload a specially crafted PHP file that can lead to elevated privileges within the system. The vulnerability has a high CVSS score of 9.3, indicating severe impact on confidentiality, integrity, and availability.