CVE-2026-105279 — J4Care dcm4che Missing Authentication for Critical Function
In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient in…
Published: 2026-10-16 · CVSS: 9.3 · CVSS 4.0
In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient information and medical images. It can also use C-STORE to file fabricated study content under an existing patient identity.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7