CVE-2026-16305

Local privilege escalation in SmartUpdate.exe and SmartExecute.exe in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable execlist.txt command manifest that is processed...

CVE-2026-16305 CVE-2026-16305

Local privilege escalation in SmartUpdate.exe and SmartExecute.exe in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable execlist.txt command manifest that is processed...

EUVD-2026-115613

Local privilege escalation in SmartUpdate.exe and SmartExecute.exe in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable execlist.txt command manifest that is processed...

CVE-2026-16305

CVE-2026-16305 is a local privilege escalation vulnerability in INFINITT PACS (specifically SmartUpdate.exe and SmartExecute.exe) affecting System Manager versions 3.0.11.3 and 3.0.11.5 . The root cause is insecure file permissions on a world-writable command manifest file, execlist.txt. A local ...

PT-2026-135504

Local privilege escalation in SmartUpdate.exe and SmartExecute.exe in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable execlist.txt command manifest that is processed...