Read the docs
TI-2026-83877 Aliases CVE-2026-16306GHSA-7897-6696-7rj4

Remote code execution in INFINITT PACS via imodular:// URI handler

Priority MEDIUM 50CWE-470Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-94.

Summary

INFINITT PACS contains a remote code execution flaw in the imodular:// URI handler of IModular.exe, tracked as CVE-2026-16306 and classified as CWE-470 and CWE-94. A remote unauthenticated attacker can send a crafted imodular:// URI with attacker-controlled command and argument parameters to invoke unintended application functionality and potentially execute arbitrary code. The CVSS 3.1 base score is 9.8 (CRITICAL).

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted `imodular:// URI` containing attacker-controlled command and argument parameters.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00675 52nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
INFINITT HealthcareSystem Manager3.0.11.3 – 3.0.11.5—No fix listedCNA
  • System Manager VendorINFINITT Healthcare Affected 3.0.11.3 – 3.0.11.5 Fixed in — No fix listed CNA

Remediation

INFINITT Healthcare lists no fix for System Manager 3.0.11.3 through 3.0.11.5. Ask the vendor for a fixed build and check its advisories for an update.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Timeline

  1. 2026-11-02 Threatist record created from CVE-2026-16306
  2. 2026-11-02 Alias added: GHSA-7897-6696-7rj4
  3. 2026-11-06 CVSS score added · CISA ADP
  4. 2026-11-06 Weakness changed · CISA ADP
  5. 2026-11-06 CISA SSVC decision points changed
  6. 2026-11-06 Priority changed: LOW → MEDIUM
  7. 2026-11-07 EPSS moved to the 50th–90th percentile

References

Other 1

  • TI-2025-20515 INFINITT Healthcare INFINITT PACS Exposure of Sensitive System Information to an Unauthorized Control Sphere CVSS 4.0HIGH 8.7
  • TI-2026-84027 Local privilege escalation in INFINITT System Manager CVSS 3.1HIGH 7.8
  • TI-2026-85787 Brute-forceable share link password in INFINITT ULite exposes images CVSS 3.1HIGH 7.5
  • TI-2026-85785 Reflected XSS in INFINITT ULite login error page CVSS 3.1MEDIUM 6.1
  • TI-2025-20508 INFINITT Healthcare INFINITT PACS Unrestricted Upload of File with Dangerous Type CVSS 4.0MEDIUM 5.3
  • TI-2025-18211 INFINITT Healthcare INFINITT PACS Unrestricted Upload of File with Dangerous Type CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences