{"id":"CVE-2026-16305","published":"2026-11-02T21:17:30.617","lastModified":"2026-11-02T21:17:30.617","description":"Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execlist.txt` command manifest that is processed during application updates.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://www.infinittna.com/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}