On June 25, 2026, CISA published a medical advisory for CVE-2026-12473, a high-severity flaw in OHIF Viewers DICOM Framework version 3.12.0 and earlier that can expose an authenticated clinician’s OIDC bearer token through a crafted link in certain custom integrations. The bug is not a cinematic...