← Back to feed
Must read FDA Other

CISA Advisory: OHIF DICOM Viewer ≤v3.12.0 Has Critical SSRF Flaw Enabling Clinician Token Theft

A high-severity server-side request forgery vulnerability in the widely deployed OHIF open-source DICOM viewer can expose authenticated clinicians' OIDC Bearer tokens to attackers — patch to v3.12.2 immediately. CISA issued ICS Medical Advisory ICSMA-26-176-02 on June 25, 2026, disclosing...

The deep analysis — cross-item commentary and how this topic has evolved — is part of SignalHealth Pro.

Start a 14-day trial