CVE-2026-5663
EUVD-2026-1924306.04.2026, 15:17
A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEndOfStudy of the file dcmnet/apps/storescp.cc of the component storescp. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The patch is named edbb085e45788dccaf0e64d71534cfca925784b8. Applying a patch is the recommended action to fix this issue.
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| offis | dcmtk | 3.0 | CNA |
| offis | dcmtk | 3.1 | CNA |
| offis | dcmtk | 3.2 | CNA |
| offis | dcmtk | 3.3 | CNA |
| offis | dcmtk | 3.4 | CNA |
| offis | dcmtk | 3.5 | CNA |
| offis | dcmtk | 3.6 | CNA |
| offis | dcmtk | 3.7.0 | CNA |
Debian Releases