CVE-2026-16305
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-11-02
Modified: 2026-11-03
First seen: 2026-11-02
Status: pending_score
Description
Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execlist.txt` command manifest that is processed during application updates.
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| INFINITT Healthcare | System Manager | 3.0.11.3 |