CVE-2026-17264: Medixant Radiant Dicom

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker-controlled heap out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.

Affected products

• Medixant Radiant Dicom: up to and including 2025.2

Published 2026-08-07. Last modified 2026-09-08.