CVE-2026-8031
PicoTronica e-Clinic Healthcare System ECHS API Endpoint patient-records missing authentication
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affected element is an unknown function of the file /cdemos/echs/api/v2/patient-records of the component API Endpoint. The manipulation results in missing authentication. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 5.7.1 is sufficient to fix this issue. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
| CWE | CWE-306 CWE-287 |
| Vendor | picotronica |
| Product | e-clinic healthcare system echs |
| Published | May 6, 2026 |
| Last Updated | May 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for picotronica e-clinic healthcare system echs
Be the first to know when new medium vulnerabilities affecting picotronica e-clinic healthcare system echs are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
PicoTronica / e-Clinic Healthcare System ECHS
5.7
References
Credits
VulDB CNA Team