Critical severity9.8NVD Advisory· Published Feb 13, 2025· Updated Jun 17, 2026
CVE-2025-0896
CVE-2025-0896
Description
Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:orthanc-server:orthanc:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:orthanc-server:orthanc:*:*:*:*:*:*:*:*range: <1.5.8
- (no CPE)range: <1.5.8
- Orthanc/Orthanc serverv5Range: 0
Patches
Vulnerability mechanics
References
1- www.cisa.gov/news-events/ics-medical-advisories/icsma-25-037-02nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.