Skip to content
NewA calmer, faster ZeroHour

[SYSS-2026-079]: dcm4che - Path Traversal (CWE-22)

Full Disclosure ()1 · 1 read
Part of a story covered by 4 sourcesSySS and CISA report separate J4Care imaging flawsMerged summary & timeline
AI summary · grok-4.7-buildSummaries by Vani AI

Unpatched path traversal in dcm4che 5.35.0 disclosed as SYSS-2026-079, rated High.

SySS disclosed SYSS-2026-079, a path traversal (CWE-22) in J4Care dcm4che 5.35.0, tested on that version. The vendor rates risk High and lists the solution status as Open. J4Care was notified on 6 August 2026, with public disclosure on 13 October 2026. The excerpt does not state a complete CVE id or observed exploitation.

Key facts
  • Advisory SYSS-2026-079 covers dcm4che 5.35.0 path traversal (CWE-22).
  • SySS rates the issue High; no fix is available (solution status Open).
  • J4Care was notified on 2026-08-06; public disclosure was 2026-10-13.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

Posted by Matthias Deeg via Fulldisclosure on Oct 15 Advisory ID: SYSS-2026-079 Product: dcm4che Manufacturer: J4Care Affected Version(s): 5. 35. 0 Tested Version(s): 5.

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.