Local Privilege Escalation in INFINITT PACS - INFINITT Healthcare Co., Ltd.

CVE-2026-16305

What is CVE-2026-16305?

INFINITT PACS by INFINITT Healthcare Co., Ltd. is susceptible to a local privilege escalation vulnerability through its components SmartUpdate.exe and SmartExecute.exe. A low-privileged attacker can exploit this weakness by modifying the world-writable execlist.txt command manifest, which is utilized during application updates. This flaw allows for the execution of arbitrary commands with elevated administrator privileges, potentially compromising the integrity and confidentiality of the system.

References