o
orthanc
Security Risk Profile
39
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 13, 2025 to present
7
Total CVEs
5
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
6.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
39/100
low
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
1High
4Medium
0Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
Integer Overflow
2
2
Buffer Overflow
2
3
XSS
1
4
Code Injection
1
Most Affected Products
1. Orthanc-server Orthanc4
2. Orthanc Orthanc3
3. Orthanc Orthanc DICOM Server2
4. Orthanc Orthanc Explorer 21
5. Orthanc Orthanc Server1
Recent Vulnerabilities
See more →CVE-2026-87020
CVSS 8.1high
Orthanc DICOM Server Integer Overflow or Wraparound
Sep 11, 2026🔧 No Patch
CVE-2026-10528
CVSS 1.9low
Orthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-based overflow
Jun 2, 2026🔧 No Patch
CVE-2026-10173
CVSS 2.1low
Orthanc Explorer 2 URL StudyList.vue cross site scripting
May 31, 2026🔧 No Patch
CVE-2026-5439
CVSS 7.5EPSS 0%high
Memory Exhaustion via Forged ZIP Metadata
Apr 9, 2026🔧 No Patch
CVE-2026-5438
CVSS 7.5EPSS 0%high
Gzip Decompression Bomb via Content-Encoding Header
Apr 9, 2026🔧 No Patch
CVE-2026-5444
CVSS 7.1EPSS 0%high
Heap Buffer Overflow in PAM Image Buffer Allocation
Apr 9, 2026🔧 No Patch
CVE-2025-0896
CVSS 9.8critical
Orthanc Server Missing Authentication for Critical Function
Feb 13, 2025
Monitor orthanc in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.