TI-2026-83877 CVE-2026-16306 · GHSA-7897-6696-7rj4
Remote code execution in INFINITT PACS via imodular:// URI handler
Priority MEDIUM 50
Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd.
INFINITT Healthcare
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
INFINITT Healthcare records in CISA KEVNo INFINITT Healthcare vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2025-20515 CVE-2025-27721 · GHSA-89cg-2gw5-2jg7
INFINITT Healthcare INFINITT PACS Exposure of Sensitive System Information to an Unauthorized Control Sphere
Priority MEDIUM 44
Unauthorized users can access INFINITT PACS System Manager without proper authorization, which could lead to unauthorized access to system resources.
TI-2026-84027 CVE-2026-16305 · GHSA-6wg9-8g76-mrm8
Local privilege escalation in INFINITT System Manager
Priority LOW 35
Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd.
TI-2026-85787 CVE-2026-19877 · GHSA-mw63-5fwq-j4r5
Brute-forceable share link password in INFINITT ULite exposes images
Priority LOW 33
INFINITT ULite 5.0.2.1_BN48_20260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the pas…
TI-2026-85785 CVE-2026-19876 · GHSA-xxf7-hwxj-cv76
Reflected XSS in INFINITT ULite login error page
Priority LOW 27
A reflected cross-site scripting (XSS) vulnerability in the login/SSO error page of INFINITT ULite 5.0.2.1_BN48_20260528 and earlier allows an unauthenticated remote attacker to execute arbitrary JavaScript in the browse…
TI-2025-20508 CVE-2025-27714 · GHSA-42gx-g3p7-q927
INFINITT Healthcare INFINITT PACS Unrestricted Upload of File with Dangerous Type
Priority LOW 26
An attacker could exploit this vulnerability by uploading arbitrary files via the a specific endpoint, leading to unauthorized remote code execution or system compromise.
TI-2025-18211 CVE-2025-24489 · GHSA-59h8-p88c-wm46
INFINITT Healthcare INFINITT PACS Unrestricted Upload of File with Dangerous Type
Priority LOW 24
An attacker could exploit this vulnerability by uploading arbitrary files via a specific service, which could lead to system compromise.