Security Advisory

CVE-2026-50003

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-30 21:27:42

Last updated 2026-07-01 15:39:24

Assigner icscert

CVSS score 9.3

State PUBLISHED

Description

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative (../) paths and absolute paths.

← Browse all CVEs View on cve.org ↗