Beveiligingsadvies

CVE-2026-56445

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-25 20:46:44
Laatst bijgewerkt 2026-06-26 13:05:22
Toegewezen door icscert
CVSS-score 9.1
Status PUBLISHED

Beschrijving

The qrscp application's C-STORE handler uses a specific instance from attacker-supplied DICOM datasets directly in os.path.join() without sanitization, allowing file writes to arbitrary paths.