Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-107621

J4Care dcm4che Loop with Unreachable Exit Condition

JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
J4care
Products
Dcm4chee-arc-light
CVE-2026-97851

J4Care dcm4che Missing Authorization

The storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states. Changing a location to TO_DELETE causes PurgeStorageScheduler to delete the referenced object from storage even though the corresponding instance record remains in the database.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
J4care
Products
Dcm4chee-arc-light
CVE-2026-105273

J4Care dcm4che Loop with Unreachable Exit Condition

MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
J4care
Products
Dcm4chee-arc-light
CVE-2026-101021

J4Care dcm4che Inefficient Algorithmic Complexity

MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
J4care
Products
Dcm4chee-arc-light
CVE-2026-105279

J4Care dcm4che Missing Authentication for Critical Function

In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient information and medical images. It can also use C-STORE to file fabricated study content under an existing patient identity.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
J4care
Products
Dcm4chee-arc-light
CVE-2026-105667

J4Care dcm4che Missing Authentication for Critical Function

In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and related workflow records from one patient identity to another. The archive's unmerge does not reverse this.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
J4care
Products
Dcm4chee-arc-light