Ghostwire

CVE-2026-105279: In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can...

CRITICAL CVSS 0.0

Published: October 16, 2026 | Last Modified: October 16, 2026

Description

In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient information and medical images. It can also use C-STORE to file fabricated study content under an existing patient identity.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References