Skip to contentOrthanc-server Orthanc vulnerabilities
- orthanc-server orthanc, orthanc dicom server +1 moreMemory Exhaustion via Forged ZIP MetadataCVE-2026-5439Fix available7.5 High
- orthanc dicom server, orthanc-server orthanc +1 moreOut-of-Bounds Read in DicomStreamReaderCVE-2026-5437Fix available7.5 High
- orthanc-server orthanc, orthanc dicom server +1 moreGzip Decompression Bomb via Content-Encoding HeaderCVE-2026-5438Fix available7.5 High
- orthanc dicom server, orthanc-server orthanc +1 moreMemory Exhaustion via Unbounded Content-LengthCVE-2026-5440Fix available7.5 High
- orthanc dicom server, orthanc-server orthanc +1 moreHeap Buffer Overflow in DICOM Image Decoder via VR UL DimensionsCVE-2026-5442Fix available9.8 Critical
- orthanc dicom server, orthanc-server orthanc +1 moreHeap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)CVE-2026-5443Fix available9.8 Critical
- orthanc dicom server, orthanc-server orthanc +1 moreOut-of-Bounds Read in DicomImageDecoder (DecodeLookupTable)CVE-2026-5445Fix available9.1 Critical
- orthanc-server orthanc, orthanc dicom server +1 moreHeap Buffer Overflow in PAM Image Buffer AllocationCVE-2026-5444Fix available7.1 High
- orthanc dicom server, orthanc-server orthanc +1 moreOut-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression)CVE-2026-5441Fix available7.1 High
- orthanc-server orthancOrthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's...CVE-2025-15581Fix available4.7 Medium
- orthanc server, orthanc-server orthanc +1 moreOrthanc Server Missing Authentication for Critical FunctionCVE-2025-0896Fix available9.2 Critical
- orthanc-server orthancOrthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS)...CVE-2024-22725Fix available6.1 Medium
- orthanc-server orthancOrthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite...CVE-2023-33466Fix available8.8 High