J4Care dcm4che

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition. The following versions of J4Care dcm4che are affected: dcm4chee-arc-light 5.35.1 (CVE-2026-97851, CVE-2026-107621, CVE-2026-105273, CVE-202

Back to dashboard

Threat CriticalSingle SourceAgencyConf ConfirmedUnited States · North AmericaPublishedStatus: PublishedCERTOpen original source

Original publisher

CERT

Original source URL

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02

Source country

United States

Reporting region

North America

Language

Institution

CISA US-CERT

Published (UTC)

Oct 15, 2026, 12:00 PM

Ingested (UTC)

Oct 16, 2026, 3:02 PM

Verification

Single Source

BASE INTEL aggregates public reporting. This item is not authored by BASE INTEL. Always review the original publisher before relying on the content.

J4Care dcm4che
Advisory ID: icsma-26-288-02
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition. The following versions of J4Care dcm4che are affected: dcm4chee-arc-light 5.35.1 (CVE-2026-97851, CVE-2026-107621, CVE-2026-105273, CVE-202
Severity: critical
Published (UTC): 2026-10-15T12:00:00.000Z
Source: CERT
Original source: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02

View original source