OOrthanc

Products

Exploited and recent CVEs

• CVE-2026-87020 High 8.1 Orthanc DICOM Server Integer Overflow or Wraparound 0.6%
• CVE-2026-10528 Low 3.3 Orthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-based overflow 0.1%
• CVE-2026-10173 Medium 4.3 Orthanc Explorer 2 URL StudyList.vue cross site scripting 0.3%
• CVE-2026-5439 High 7.5 Memory Exhaustion via Forged ZIP Metadata 0.4%
• CVE-2026-5437 High 7.5 Out-of-Bounds Read in DicomStreamReader 0.7%
• CVE-2026-5438 High 7.5 Gzip Decompression Bomb via Content-Encoding Header 0.5%
• CVE-2026-5440 High 7.5 Memory Exhaustion via Unbounded Content-Length 0.6%
• CVE-2026-5442 Critical 9.8 Heap Buffer Overflow in DICOM Image Decoder via VR UL Dimensions 0.6%
• CVE-2026-5443 Critical 9.8 Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode) 0.6%
• CVE-2026-5445 Critical 9.1 Out-of-Bounds Read in DicomImageDecoder (DecodeLookupTable) 0.7%
• CVE-2026-5444 High 7.1 Heap Buffer Overflow in PAM Image Buffer Allocation 0.2%
• CVE-2026-5441 High 7.1 Out-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression) 0.1%
• CVE-2025-0896 Critical 9.8 Orthanc Server Missing Authentication for Critical Function 2.5%
• CVE-2023-7238 High 7.1 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Orthanc Osimis DICOM Web Viewer 0.3%