CVE ID :CVE-2026-12473 Published : June 25, 2026, 8:38 p.m. | 32 minutes ago Description :Two data sources (DICOMWebProxy and DICOMJSON) shipped in the default configuration fetch an arbitrary URL parameter without validation. A global authentication service in OHIF automatically injects the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-12473 - OHIF Viewers DICOM Server-Side request forgery

VERWANDTEARTIKEL

USN-8477-1: tar vulnerability

CVE-2026-56445 - pydicom pynetdicom Library Path Traversal

CVE-2026-6679 - DTLS 1.3 ACK serialization heap buffer overflow via integer truncation

CVE-2026-11310 - X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring

CVE-2026-55958 - Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage

CVE-2026-55960 - Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation