PT-2026-38224 · Picotronica · E-Clinic Healthcare System Echs

CVE-2026-8032

·

Published

2026-05-06

·

Updated

2026-05-07

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions PicoTronica e-Clinic Healthcare System ECHS version 5.7
Description A flaw in the file /cdemos/echs/priv/echs.js allows remote attackers to exploit hard-coded credentials through the manipulation of the ADMIN KEY argument.
Recommendations Upgrade to version 5.7.1.

Exploit

Fix

Using Hardcoded Credentials

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-259CWE-798

Related Identifiers

CVE-2026-8032

Affected Products

E-Clinic Healthcare System Echs