CVE-2026-105279

Summary

The DICOM archive allows unauthenticated access from any calling application entity, enabling remote attackers to enumerate patient data, retrieve medical images, and even inject fabricated study content under existing patient identities. This represents a critical privacy and data integrity vulnerability in healthcare systems.

Exploitability

Exploitation is straightforward requiring only network access to the DICOM service with no authentication prerequisites, making it highly suitable for automated scanning and exploitation.

Blast radius

The impact could be extensive across healthcare networks as attackers can access sensitive patient records, medical images, and potentially manipulate patient data, affecting multiple departments including radiology, cardiology, and general medicine.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Implement strict AE title registration and authentication controls to prevent unregistered calling AEs from connecting to the DICOM archive, or upgrade to version 2.590 or later if available.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.