INFINITT Healthcare has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was November 2026 with 4. The median CVSS is 6.8 (medium). Most affected products: INFINITT ULite (2), System Manager (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.8
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Products
- INFINITT ULite 2
- System Manager 2
INFINITT Healthcare vulnerabilities
CVEs affecting INFINITT Healthcare, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-19877High· 7.5Brute-forceable image-share link password in INFINITT ULite
INFINITT ULite 5.0.2.1_BN48_20260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the password within the …
CVE-2026-19876Medium· 6.1Reflected XSS in INFINITT ULite login error page (pre-auth)
A reflected cross-site scripting (XSS) vulnerability in the login/SSO error page of INFINITT ULite 5.0.2.1_BN48_20260528 and earlier allows an unauthenticated remote attacker to execute arbitrary JavaScript in the browser of a victim who…
CVE-2026-16305NoneCVE-2026-16305
Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of …
CVE-2026-16306NoneCVE-2026-16306
Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a c…