ZDI-26-104
HIGH 7.8
Published
Feb 13, 2026
Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability
Sante
A remote code execution vulnerability (CVE-2026-2034) has been identified in Sante DICOM Viewer Pro, rated as HIGH severity with a CVSS score of 7.8. An attacker can exploit this flaw by tricking users into visiting a malicious website or opening a crafted file, allowing arbitrary code execution on the victim's system. Security teams should prioritize patching this application, warn users to avoid untrusted files and websites, and monitor for suspicious activity related to DICOM Viewer Pro installations.