CVE-2026-105279

CVE-2026-105279 · J4Care dcm4che Missing Authentication for Critical Function

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient information and medical images. It can also use C-STORE to file fabricated study content under an existing patient identity.

CVSS 9.3 · Critical · EPSS 0.2%

Published

2026-10-16T14:30:51.439Z

Updated

2026-10-16T15:20:18.403Z

Check your server →