PT-2026-33238 · Echo+1 · Echo+1

·

CVE-2026-5266

·

Published

2026-04-03

·

Updated

2026-07-09

CVSS v2.0

4.0

Medium

VectorAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Echo versions prior to 1.43.7 Echo versions prior to 1.44.4 Echo versions prior to 1.45.2
Description Exposure of sensitive information to an unauthorized actor occurs in the program file includes/Api/ApiEchoNotifications.Php.
Recommendations Update to version 1.43.7 or later. Update to version 1.44.4 or later. Update to version 1.45.2 or later.

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-10833
CVE-2026-5266

Affected Products

Echo
Red Os