Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in Orthanc Explorer 2 up to 1.12.0. The impacted element is an unknown function of the file WebApplication/src/components/StudyList.vue of the component URL Handler. This manipulation of the argument remote-source causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 21f78ce5da668bf5233efcd1896ec7c6e3b22eae. Applying a patch is the recommended action to fix this issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-10173 A weakness has been identified in Orthanc Explorer 2 up to 1.12.0. The impacted element is an unknown function of the file WebApplication/src/components/StudyList.vue… https://www.cve.org/CVERecord?id=CVE-2026-10173
Post summary
A brief CVE disclosure for Orthanc Explorer 2 highlighting an unspecified weakness, with no detail on exploits, patches, or practical impact.
CVE-2026-10173 Cross-Site Scripting in Orthanc Explorer 2 Up to 1.12.0 URL Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10173
Post summary
The text identifies CVE‑2026‑10173 as an XSS vulnerability in Orthanc Explorer 2, provides a brief description and a link to vulnerability details, but offers no evidence of a PoC, exploit, patch, or active exploitation.