← Database

CVE-2026-50003

CRITICAL CVSS: 9.8 Published: 2026-06-30 Modified: 2026-07-01

Description

A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode write files outside the chosen output directory, using both relative (../) paths and absolute paths.

Affected Platforms

Unknown

Weakness Type

CWE-22

References