PT-2026-137873

CVE-2026-19877

·

Published

2026-11-06

·

Updated

2026-11-06

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
INFINITT ULite 5.0.2.1 BN48 20260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the password within the link validity window and gain unauthorized access to shared medical images. Fixed in ULite 5.0.2.1 BN50.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-331: Insufficient Entropy
CWE-307: Improper Restriction of Excessive Authentication Attempts
Related identifiers
CVE-2026-19877
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com