Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| INFINITT Healthcare | System Manager | affected |
|
No data.
No data.
No data available yet.
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.infinittna.com/ |
|
Mon, 02 Nov 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-20 CWE-78 |
Mon, 02 Nov 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted `imodular:// URI` containing attacker-controlled command and argument parameters. | |
| Title | CVE-2026-16306 | |
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: certcc
Published:
Updated: 2026-11-02T15:38:11.487Z
Reserved: 2026-07-20T14:09:38.457Z
Link: CVE-2026-16306
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-11-02T16:17:34.420
Modified: 2026-11-02T16:17:34.420
Link: CVE-2026-16306
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-11-02T16:30:18Z