These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A CVE record was published for a vulnerability in J4Care dcm4chee-arc-light. The default configuration of the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. This allows a remote sender to reassign studies and related workflow records from one patient identity to another. The vulnerability impacts patient data and workflow records, allowing unauthorized [truncated]
A critical vulnerability exists in J4Care dcm4chee-arc-light, allowing remote peers to enumerate and retrieve patient information and medical images without authentication. This issue arises from the product's default configuration, which accepts DICOM associations from unregistered calling AE. The vulnerability impacts healthcare organizations and medical institutions, potentially leading to unauthorized [truncated]
The CVE-2026-101021 vulnerability in J4Care dcm4chee-arc-light involves inefficient algorithmic complexity in MultipartInputStream, allowing crafted multipart input to cause excessive boundary comparisons and repeated copying. This issue has a CVSS score of 7.5 and is considered HIGH severity. The vulnerability was published on 2026-10-16T14:28:54.992Z and last modified on 2026-10-16T15:20:18.725Z.
A vulnerability in J4Care dcm4che allows for a loop with an unreachable exit condition due to inadequate validation of MP4 box sizes. This could potentially cause parsing to make no forward progress and repeatedly process the same input. The vulnerability affects J4Care dcm4che and could lead to denial of service. Defenders should assess exposure and prioritize verification and remediation efforts. The CV [truncated]
A vulnerability in J4Care dcm4che can cause an infinite loop while parsing a specially crafted or truncated JPEG stream, potentially impacting medical imaging systems. This issue arises from the JPEGParser's inability to handle certain malformed inputs, leading to a denial-of-service condition. Defenders should assess exposure and prioritize verification and remediation efforts, especially in medical imag [truncated]
The storage status-change REST service in J4Care dcm4che allows unauthorized changes to location records, potentially leading to object deletion from storage. This vulnerability affects J4Care dcm4che deployments, which may be exposed to unauthorized data modifications. Defenders should assess the impact and prioritize remediation based on the severity of the vulnerability and the potential operational im [truncated]