Skip to content
Threat Feed

Tag

Dcmtk

1 brief RSS
high advisory

OFFIS DCMTK Command Injection Vulnerability (CVE-2026-5663)

A remote command injection vulnerability exists in OFFIS DCMTK version 3.7.0 and earlier due to insufficient input sanitization in the `storescp` application, potentially allowing unauthenticated attackers to execute arbitrary OS commands.

command-injection dcmtk cve-2026-5663 storescp
2r 1t 1c