{"id":"CVE-2026-105279","published":"2026-10-16T15:17:04.130","lastModified":"2026-10-16T20:04:29.760","description":"In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient information and medical images. It can also use C-STORE to file fabricated study content under an existing patient identity.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json","tags":[]},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-288-02","tags":[]}],"exploitRefs":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-288-02.json","tags":[]}],"hasPoc":true,"ai":{"summary":"The DICOM archive allows unauthenticated access from any calling application entity, enabling remote attackers to enumerate patient data, retrieve medical images, and even inject fabricated study content under existing patient identities. This represents a critical privacy and data integrity vulnerability in healthcare systems.","exploitability":"Exploitation is straightforward requiring only network access to the DICOM service with no authentication prerequisites, making it highly suitable for automated scanning and exploitation.","blast_radius":"The impact could be extensive across healthcare networks as attackers can access sensitive patient records, medical images, and potentially manipulate patient data, affecting multiple departments including radiology, cardiology, and general medicine.","remediation":"Implement strict AE title registration and authentication controls to prevent unregistered calling AEs from connecting to the DICOM archive, or upgrade to version 2.590 or later if available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["healthcare","dicom","privacy","data-exfiltration"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:49:00.250Z"}}