CVE-2026-16306

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-11-02 Modified: 2026-11-02 First seen: 2026-11-02 Status: pending_score

Description

Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted `imodular:// URI` containing attacker-controlled command and argument parameters.

Affected Software (1)

VendorProductVersion
INFINITT Healthcare System Manager 3.0.11.3

References & Advisories (1)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.24%
Raw Score 0.002450
Percentile 15.8%
Date 2026-11-05

EPSS Trend

2026-11-05
0.00245
2026-11-04
0.00245
2026-11-03
0.00245

Intelligence Sources

mitre ref →
nvd ref →