Skip to content
CVE PROGRAM SOURCE RECORD9.2 Critical

CVE-2025-0896

Orthanc Server Missing Authentication for Critical Function

Description

Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Orthanc Orthanc server

Default version status: unaffected

  • 0 to < 1.5.8affected

References