CVE-2026-105279
CRITICAL
NVD
CVSS Score
9.1
Severity
CRITICAL
Published
Oct 16, 2026
Vendor
unknown
Description
In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient information and medical images. It can also use C-STORE to file fabricated study content under an existing patient identity.