[SYSS-2026-078]: dcm4che - Path Traversal (CWE-22)

Summary by Cyber Security News15 Oct 2026, 09:43 CET

About this summary. This is a short excerpt from the description that Full Disclosure published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/fulldisclosure/2026/Oct/23

Posted by Matthias Deeg via Fulldisclosure on Oct 15 Advisory ID: SYSS-2026-078 Product: dcm4che Manufacturer: J4Care Affected Version(s): 5.35.0 Tested Version(s): 5.35.0 Vulnerability Type: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Risk Level: High Solution Status: Open Manufacturer Notification: 2026-08-06 Public Disclosure: 2026-10-13 CVE...

Read the full article at Full Disclosure →

Source attribution: headline and facts are from Full Disclosure (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

[SYSS-2026-080]: dcm4che - Path Traversal (CWE-22)

[SYSS-2026-079]: dcm4che - Path Traversal (CWE-22)

[SYSS-2026-077]: dcm4che - Path Traversal (CWE-22)

SAP security advisory – October 2026 monthly rollup (AV26-1030)

Flock can now issue CVEs for its own products. Should we trust it?

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts