CVE-2026-16306
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-11-02
Modified: 2026-11-02
First seen: 2026-11-02
Status: pending_score
Description
Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted `imodular:// URI` containing attacker-controlled command and argument parameters.
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| INFINITT Healthcare | System Manager | 3.0.11.3 |