criticalVulnerability
Six Critical Vulnerabilities Discovered in J4Care dcm4chee-arc-light Medical Imaging Platform
CVSS scores up to 9.1; flaws enable image deletion, patient data disclosure, and denial-of-service conditions
Cyber.TechVoid2 min read
Key Takeaways
- Six vulnerabilities affect J4Care dcm4chee-arc-light version 5.35.1, with CVSS scores up to 9.1 (v3) and 9.3 (v4).
- Flaws include missing authorization, infinite loops in parsing libraries, and inefficient algorithmic complexity.
- Exploitation could allow deletion of medical images, disclosure of patient data, injection of forged studies, record reassignment, file overwriting, and denial-of-service conditions.
- J4Care recommends upgrading to release 5.35.2 or later to remediate the vulnerabilities.
Related Security News
highPhishing
CISA and FBI Issue PSA on Cyber Threats Targeting Election Officials Ahead of 2026 Midterms
CISA and the FBI have released a Public Service Announcement warning that malicious cyber actors are using sophisticated phishing and smishing techniques to target election and campaign officials ahead of the 2026 U.S. midterm elections. The campaigns are designed to steal login credentials, install malware, and gain unauthorized access to voter registration data and sensitive campaign information. Officials urge heightened vigilance and adoption of recommended cybersecurity practices.
CISA Advisories1 min read
