[SYSS-2026-077]: dcm4che - Path Traversal (CWE-22)
Third SySS advisory, SYSS-2026-077, reports unpatched path traversal in dcm4che 5.35.0.
Full Disclosure post SYSS-2026-077 describes a CWE-22 path traversal in J4Care's dcm4che, affected and tested version 5.35.0. Risk is High and the solution status is Open. The vendor was notified on 6 August 2026, with public disclosure on 13 October 2026. The available text does not include a complete CVE id or evidence of exploitation.
- SYSS-2026-077 reports path traversal (CWE-22) in dcm4che 5.35.0.
- SySS assigns High risk and an Open solution status.
- J4Care notification date is 2026-08-06; disclosure is 2026-10-13.
From the original article
Posted by Matthias Deeg via Fulldisclosure on Oct 15 Advisory ID: SYSS-2026-077 Product: dcm4che Manufacturer: J4Care Affected Version(s): 5. 35. 0 Tested Version(s): 5.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.