CVE-2026-16306Not scored
CVE-2026-16306
INFINITT Healthcare · System Manager
Not in CISA KEV
0.3%probability of exploitation in the next 30 days
15th percentile
050100
Higher than 15% of scored CVEs
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted `imodular:// URI` containing attacker-controlled command and argument parameters.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 4 Nov.
- CERT/CC discloses two critical flaws in INFINITT PACSSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.