System Manager vulnerabilities

2 known vulnerabilities in System Manager from INFINITT Healthcare. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  System Manager: Improper Privilege Management

  CVE-2026-16305Nov 2, 2026INFINITT Healthcare

  Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execl

• 9.8 Critical severity

  System Manager: Improper Control of Generation of Code

  CVE-2026-16306Nov 2, 2026INFINITT Healthcare

  Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted `imodular:// URI