CVE-2026-8033

MediumCVSS 5.3

Published: 06/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

22th percentile - higher than 22% of all known CVEs

Summary

A vulnerability in PicoTronica e-Clinic Healthcare System ECHS 5.7 in the file /cdemos/echs/api/v2/ leads to information disclosure. The attack can be performed remotely, and the exploit has been publicly disclosed.

Risk Assessment

This may lead to unauthorized access to sensitive medical data and breach of confidentiality.

Recommendation

Update the system to version 5.7.1, which fixes this vulnerability.

Other vulnerabilities in PicoTronica e-Clinic Healthcare System ECHS

CVE-2026-8031Medium
In PicoTronica e-Clinic Healthcare System ECHS 5.7, the file /cdemos/echs/api/v2/patient-records (API Endpoint component) contains an unknown function with missing authentication. The attack can be executed remotely, and the exploit is publicly available and may be used. Upgrading to version 5.7.1 is sufficient to fix the issue.

Original NVD description (English source)

A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7. This affects an unknown function of the file /cdemos/echs/api/v2/ of the component Response Header Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Upgrading to version 5.7.1 mitigates this issue. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS