CVE-2026-52868 — OFFIS DCMTK Toolkit Path Traversal
An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment, this can cross departmental…
Published: 2026-06-30 · CVSS: 8.8 · CVSS 4.0
An unauthenticated attacker can read worklist records from a directory outside the intended per-AE worklist storage area. In a multi-area deployment, this can cross departmental or clinic data separation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7