CVE Watch2 nov 2026

CVE-2026-16305

Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-pri

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 2 nov 2026 · Última mod.: 2 nov 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execlist.txt` command manifest that is processed during application updates.

Referencias oficiales

www.infinittna.comhttps://www.infinittna.com/

CVEs relacionados

Sin CVEs relacionados por CWE o producto.