[ CVE-2026-16305 · Published 2 Nov 2026 ]
Vulnerability in INFINITT Healthcare System Manager
Not scored yet
EPSS <1%No fix listed yet
[ Description ]Official description
Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execlist.txt` command manifest that is processed during application updates.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.