{"affected":[{"product":"System Manager","source":"CNA: certcc","vendor":"INFINITT Healthcare","versions":[{"lessThanOrEqual":"3.0.11.5","status":"affected","version":"3.0.11.3","versionType":"custom"}]}],"cveId":"CVE-2026-16306","cwes":["CWE-470","CWE-94"],"description":"Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted `imodular:// URI` containing attacker-controlled command and argument parameters.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793636254420,"publishedAt":1793633891487,"references":[{"source":"CNA: certcc","tags":[],"url":"https://www.infinittna.com/"},{"source":"cret@cert.org","tags":[],"url":"https://www.infinittna.com/"}],"remediation":[],"revision":"dce3feecf3a9b120156feba476236d99d33d19df1468a972cb19717342603522","sources":[{"modifiedAt":1793633891487,"name":"CNA: certcc","retrievedAt":1793635740721,"url":"https://www.cve.org/CVERecord?id=CVE-2026-16306"},{"modifiedAt":1793636254420,"name":"NVD","retrievedAt":1793643558876,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16306"}],"ssvc":null,"status":"published","title":"CVE-2026-16306","updatedAt":1793643558876}