VU#203719: INFINITT PACS System Manager Contains Multiple Code Execution Vulnerabilities
Source CERT/CC
Mentioned vulnerabilities
Fixed in 3.0.12.3 : patch affected systems soon.
Data as of 2 Nov 2026, 17:58 UTC
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in 3.0.12.3
What to do
AI-suggested
INFINITT Healthcare recommends upgrading affected installations to System Manager versions 3.0.12.3 or 3.0.12.5 as soon as operationally feasible. These versions contain fixes for the vulnerabilities. There are no indications of exploitation in the wild. Organizations should apply these updates promptly to mitigate the risks.
Description
INFINITT PACS System Manager versions 3.0.11.3 and 3.0.11.5 contain multiple code execution vulnerabilities. CVE-2026-16305 allows a local low-privileged attacker to execute arbitrary commands with administrative privileges due to insecure file permissions on an update manifest file. CVE-2026-16306 allows remote code execution via a crafted imodular:// URI scheme that executes unsafe commands without proper validation. Both vulnerabilities have been fixed in versions 3.0.12.3 and 3.0.12.5.