Is CVE-2026-44628 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-44628 being exploited in the wild.

How severe is CVE-2026-44628?

High severity, with a CVSS score of 7.5, published 30 June 2026.

Is there a fix for CVE-2026-44628?

A patch was published on 2026-06-25: Fix included in latest GitHub snapshot/commits Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-44628 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-44628?

Check whether you run OFFIS DCMTK Toolkit at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-44628: OFFIS DCMTK type confusion in worklist server

CVE-2026-44628 · Severity: high · CVSS 7.5 · Published 2026-06-30

A vulnerability in the DCMTK medical imaging toolkit allows an unauthenticated attacker to remotely crash the worklist server. This server is responsible for managing patient and procedure information in healthcare environments. A successful exploit would result in a denial-of-service, potentially disrupting clinical workflows and medical imaging operations until the service is manually restarted.

Technologies: OFFIS DCMTK Toolkit. Vendors: OFFIS.

Quick answers

Is CVE-2026-44628 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-44628 being exploited in the wild.
How severe is CVE-2026-44628?: High severity, with a CVSS score of 7.5, published 30 June 2026.
Which products and versions are affected?: OFFIS DCMTK Toolkit <=3.7.0.
Is there a fix for CVE-2026-44628?: A patch was published on 2026-06-25: Fix included in latest GitHub snapshot/commits Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-44628 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-44628?: Check whether you run OFFIS DCMTK Toolkit at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A type confusion vulnerability (CWE-843) exists in the OFFIS DCMTK Toolkit versions 3.7.0 and prior. An unauthenticated remote attacker can trigger a process crash by sending a specifically crafted query to the worklist server. For the exploit to succeed, the server must have a valid Called AE Title/storage directory, the expected lockfile, and at least one matching worklist record. The vulnerability is addressed in the latest DCMTK GitHub snapshots, and users are advised to update to the latest available release.

Affected products

OFFIS DCMTK Toolkit <=3.7.0

Timeline

2026-06-25: patched: Fix included in latest GitHub snapshot/commits
2026-06-30: advisory: CISA Advisory ICSMA-26-181-01 published
2026-06-30: disclosed: CVE-2026-44628 published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.