[SYSS-2026-079]: dcm4che - Path Traversal (CWE-22)
Unpatched path traversal in dcm4che 5.35.0 disclosed as SYSS-2026-079, rated High.
SySS disclosed SYSS-2026-079, a path traversal (CWE-22) in J4Care dcm4che 5.35.0, tested on that version. The vendor rates risk High and lists the solution status as Open. J4Care was notified on 6 August 2026, with public disclosure on 13 October 2026. The excerpt does not state a complete CVE id or observed exploitation.
- Advisory SYSS-2026-079 covers dcm4che 5.35.0 path traversal (CWE-22).
- SySS rates the issue High; no fix is available (solution status Open).
- J4Care was notified on 2026-08-06; public disclosure was 2026-10-13.
From the original article
Posted by Matthias Deeg via Fulldisclosure on Oct 15 Advisory ID: SYSS-2026-079 Product: dcm4che Manufacturer: J4Care Affected Version(s): 5. 35. 0 Tested Version(s): 5.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.