CVE-2026-16305
CVE-2026-16305
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execlist.txt` command manifest that is processed during application updates.
| Vendor | infinitt healthcare |
| Product | system manager |
| Published | Nov 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for infinitt healthcare system manager
Be the first to know when new unknown vulnerabilities affecting infinitt healthcare system manager are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
INFINITT Healthcare / System Manager
3.0.11.3 ≤ 3.0.11.5