CVE-2026-56445

Name of the Vulnerable Software and Affected Versions qrscp (affected versions not specified)

Description The C-STORE handler in the qrscp application fails to sanitize specific instances within attacker-supplied DICOM (Digital Imaging and Communications in Medicine) datasets. These unsanitized values are passed directly into the os.path.join() function, which can be exploited to write files to arbitrary paths on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.