Remote Code Execution Vulnerability in INFINITT PACS by INFINITT Healthcare

CVE-2026-16306

What is CVE-2026-16306?

A vulnerability has been identified in INFINITT PACS that allows unauthenticated remote attackers to exploit the URI handler 'IModular.exe'. By crafting a specially designed 'imodular://' URI with malicious command and argument parameters, an attacker can access unintended functionalities of the application, consequently leading to potential arbitrary code execution. This poses significant security risks for users of INFINITT PACS.

References