VULNERABILITY INTELLIGENCE
CVE-2025-15581
EPSS probability0.56%
CISA KEVNot currently listed
Published2026-02-18
Last modified2026-06-17
Description
Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation. Successful exploitation could result in Privilege Escalation, potentially allowing full administrative access.
Weakness classification
- ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a: CWE-287