Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

[SYSS-2026-078]: dcm4che - Path Traversal (CWE-22)

Full Disclosure ()1 · 1 read
Read at seclists.org
Part of a story covered by 4 sourcesSySS and CISA report separate J4Care imaging flawsMerged summary & timeline
AI summary · grok-4.7-buildSummaries by Vani AI

SySS discloses unpatched dcm4che 5.35.0 path traversal as advisory SYSS-2026-078.

SySS published SYSS-2026-078, another improper pathname limitation (CWE-22) affecting J4Care dcm4che 5.35.0. The tested version is 5.35.0, risk is High, and no solution is listed. The manufacturer was notified on 6 August 2026 and the issue was disclosed on 13 October 2026. No full CVE identifier or in-the-wild exploitation is stated.

Key facts
  • Advisory SYSS-2026-078 is a separate dcm4che 5.35.0 path traversal (CWE-22).
  • Risk is High and the solution status remains Open.
  • Notification was 2026-08-06; disclosure was 2026-10-13.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
dcm4chej4carepath-traversalcwe-22syssunpatched
Vendors
J4Care
Products
dcm4che

From the original article

Posted by Matthias Deeg via Fulldisclosure on Oct 15 Advisory ID: SYSS-2026-078 Product: dcm4che Manufacturer: J4Care Affected Version(s): 5. 35. 0 Tested Version(s): 5.

Full Disclosure

seclists.org

Read the full article at Full Disclosure

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.