Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation.
Successful exploitation could result in Privilege Escalation, potentially allowing full administrative access.
Successful exploitation could result in Privilege Escalation, potentially allowing full administrative access.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 18 Feb 2026 23:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation. Successful exploitation could result in allow Privilege Escalation, potentially allowing full administrative access. | Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation. Successful exploitation could result in Privilege Escalation, potentially allowing full administrative access. |
Wed, 18 Feb 2026 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Orthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's HTTP Basic Authentication implementation. Successful exploitation could result in allow Privilege Escalation, potentially allowing full administrative access. | |
| Weaknesses | CWE-287 | |
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: PRJBLK
Published:
Updated: 2026-02-18T23:03:54.596Z
Reserved: 2026-02-18T03:40:45.397Z
Link: CVE-2025-15581
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-02-18T23:16:18.907
Modified: 2026-02-19T00:16:20.913
Link: CVE-2025-15581
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses