Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A memory exhaustion vulnerability exists in ZIP archive processing. Orthanc automatically extracts ZIP archives uploaded to certain endpoints and trusts metadata fields describing the uncompressed size of archived files. An attacker can craft a small ZIP archive containing a forged size value, causing the server to allocate extremely large buffers during extraction.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-5439 Memory Exhaustion Vulnerability in Orthanc ZIP Archive Processing via Forged Size Metadata https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5439
Post summary
The post supplies the CVE ID, a brief vulnerability description, and a link to a vulnerability database entry, but no additional technical evidence, PoC, or exploitation details.
CVE-2026-5439 A memory exhaustion vulnerability exists in ZIP archive processing. Orthanc automatically extracts ZIP archives uploaded to certain endpoints and trusts metadata fields… https://www.cve.org/CVERecord?id=CVE-2026-5439
Post summary
CVE-2026-5439 is a newly disclosed memory‑exhaustion flaw in ZIP archive handling by Orthanc, where automatic extraction and trusted metadata lead to potential over‑allocation, but no exploitation, patch, or PoC details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | orthanc-server | orthanc | - | - | - |