[ Vendor · 6 CVEs ]
J4Care
CVEs affecting J4Care published in the last 30 days, plus any J4Care CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97851 | 16 Oct 2026 | CVSS 9.1 | J4Care dcm4chee-arc-lightThe storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states… | |
| CVE-2026-107621 | 16 Oct 2026 | CVSS 7.5 | J4Care dcm4chee-arc-lightJPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream. | |
| CVE-2026-105279 | 16 Oct 2026 | CVSS 9.1 | J4Care dcm4chee-arc-lightIn the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to… | |
| CVE-2026-105667 | 16 Oct 2026 | CVSS 7.5 | J4Care dcm4chee-arc-lightIn the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender… | |
| CVE-2026-105273 | 16 Oct 2026 | CVSS 7.5 | J4Care dcm4chee-arc-lightMP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same… | |
| CVE-2026-101021 | 16 Oct 2026 | CVSS 7.5 | J4Care dcm4chee-arc-lightMultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary… |