CVE-2026-16305

None

CVSS

—

EPSS

0.3%

Published

Nov 2, 2026

CISA due date

—

The record

Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execlist.txt` command manifest that is processed during application updates.

Affected packages

Ecosystem	Package	Introduced	Fixed