Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execlist.txt` command manifest that is processed during application updates.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.infinittna.com/ |
Configurations
No configuration.
History
02 Nov 2026, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-11-02 21:17
Updated : 2026-11-03 16:30
NVD link : CVE-2026-16305
Mitre link : CVE-2026-16305
CVE.ORG link : CVE-2026-16305
JSON object : View
Products Affected
No product.
CWE
No CWE.