What’s Vulnerable › Products

orthanc-server orthanc vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your orthanc-server orthanc version is affected

Latest orthanc-server orthanc vulnerabilities

• CVE-2026-5445 — Out-of-Bounds Read in DicomImageDecoder (DecodeLookupTable) (CVSS 9.1)
• CVE-2026-5444 — Heap Buffer Overflow in PAM Image Buffer Allocation (CVSS 7.1)
• CVE-2026-5443 — Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode) (CVSS 9.8)
• CVE-2026-5442 — Heap Buffer Overflow in DICOM Image Decoder via VR UL Dimensions (CVSS 9.8)
• CVE-2026-5441 — Out-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression) (CVSS 7.1)
• CVE-2026-5440 — Memory Exhaustion via Unbounded Content-Length (CVSS 7.5)
• CVE-2026-5439 — Memory Exhaustion via Forged ZIP Metadata (CVSS 7.5)
• CVE-2026-5438 — Gzip Decompression Bomb via Content-Encoding Header (CVSS 7.5)
• CVE-2026-5437 — Out-of-Bounds Read in DicomStreamReader (CVSS 7.5)
• CVE-2025-15581 — (CVSS 4.7)
• CVE-2025-0896 — Orthanc Server Missing Authentication for Critical Function (CVSS 9.8)
• CVE-2024-22725 — (CVSS 6.1)
• CVE-2023-33466 — (CVSS 8.8)