CVE-2026-118684 - MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads
CVE ID :CVE-2026-118684 Published : Oct. 28, 2026, 7:17 p.m. | 1 hour, 7 minutes ago Description :MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns True when hash_val is None, with MD5 as the default hash type. Attackers...