CVE-2026-5663
High · 7.3CVSS
7.3
EPSS
2.8%
Published
Apr 6, 2026
CISA due date
—
The record
A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEndOfStudy of the file dcmnet/apps/storescp.cc of the component storescp. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The patch is named edbb085e45788dccaf0e64d71534cfca925784b8. Applying a patch is the recommended action to fix this issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | dcmtk | 0 | 3.7.0-2.1 |
Related vulnerabilities
- CVE-2025-14841 A flaw has been found in OFFIS DCMTK up to 3.6.9. Also affects dcmtk
- CVE-2025-14607 A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Also affects dcmtk
- CVE-2024-52333 An improper array index validation vulnerability exists in the determineMinMax… Also affects dcmtk
- CVE-2024-47796 An improper array index validation vulnerability exists in the nowindow functionality of… Also affects dcmtk
- CVE-2026-114575 A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. CWE-77
- CVE-2026-112942 launch-editor allows users to open files with line numbers in editor from Node.js. CWE-77
- CVE-2026-55453 OpenPrinting CUPS is an open source printing system for Linux and other Unix-like… CWE-77
- CVE-2026-102827 simple-git, an interface for running git commands in any node.js application, enables… CWE-77