VulnerabilitiesAug 6, 2026

Medixant RadiAnt DICOM

Medixant RadiAnt DICOM vulnerability CVE-2026-17264 allows remote code execution via crafted DICOM files.

A critical vulnerability, CVE-2026-17264, has been identified in Medixant RadiAnt DICOM versions prior to 2026.1. Successful exploitation could allow an attacker to achieve remote code execution by tricking a user into opening a maliciously crafted DICOM file. The vulnerability is an out-of-bounds write in the handling of JPEG-compressed pixel data.

AI summary of the linked source. Not reviewed by an editor. How this works

Read at source

Vendor Watch

Run Medixant?

Get an email when a new story names Medixant, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works Privacy

The lesson from this incident

Full lesson

A critical out-of-bounds write vulnerability in Medixant RadiAnt DICOM viewer (CVE-2026-17264) allows attackers to achieve remote code execution by convincing a user to open a specially crafted DICOM file. This is a classic user-triggered exploit pattern where an unpatched application processes malformed input without proper bounds checking, leading to memory corruption. Medical imaging software is particularly high-risk because DICOM files are routinely shared across healthcare networks, radiology departments, and external providers, giving attackers a plausible delivery vector. The healthcare sector's reliance on legacy and specialized software often delays patching, amplifying the window of exposure. Exploitation could compromise clinical workstations, potentially impacting patient data confidentiality and care continuity.

What helps against this

How we list vendors

Automated patch management
Known holes get closed in days, not months.
For exampleManageEngine Patch Manager Plus Ivanti Neurons for Patch Management Microsoft Intune all options
Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
For exampleESET PROTECT Huntress Managed EDR SentinelOne Singularity Endpoint all options
Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
For exampleCloudflare Email Security Abnormal AI Abnormal Inbound Email Security Microsoft Defender for Office 365 all options

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

cve — CVE-2026-17264

Entities

RadiAnt DICOM (product)Medixant (vendor)