Orthanc — Vulnerabilities & Security Advisories 11

Orthanc serves as a lightweight DICOM server for medical imaging, enabling storage and retrieval of radiology data. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues due to insufficient input validation and access controls. The software's exposure to the internet has led to several high-severity incidents, including unauthorized access to sensitive patient data and system compromises. Despite its utility in healthcare environments, the project's security track record shows consistent vulnerabilities, with 11 CVEs documenting issues ranging from authentication bypass to information disclosure. Proper hardening and network segmentation remain critical for secure deployment.