CVE-2026-16306: Security vulnerability

Published Nov 2, 2026

Updated

Remote Code Execution in the IModular.exe URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted imodular:// URI containing attacker-controlled command and argument parameters.

Event History

Nov 2, 2026

CVE Published

via NVD·04:17 PM

Data Sourced

via NVD·04:17 PM

Description

Frequently Asked Questions

Does an attacker need an account or prior access to exploit this issue?

No. The issue is described as remotely exploitable by an unauthenticated attacker.

What attacker-controlled input is involved in exploitation?

Exploitation uses a crafted imodular:// URI containing attacker-controlled command and argument parameters.

What is the potential security impact of a successful attack?

An attacker may invoke unintended application functionality and potentially execute arbitrary code.

CVE-2026-16306: Security vulnerability

Event History

Frequently Asked Questions

Does an attacker need an account or prior access to exploit this issue?

What attacker-controlled input is involved in exploitation?

What is the potential security impact of a successful attack?

Company

Resources

Contact

Frequently Asked Questions

Does an attacker need an account or prior access to exploit this issue?

What attacker-controlled input is involved in exploitation?

What is the potential security impact of a successful attack?