CVE-2026-8032 | PicoTronica e-Clinic Healthcare System ECHS 5.7 echs.js ADMIN_KEY hard-coded credentials

A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7 and classified as critical. The impacted element is an unknown function of the file /cdemos/echs/priv/echs.js. This manipulation of the argument ADMIN_KEY causes hard-coded credentials.

This vulnerability is tracked as CVE-2026-8032. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The affected component should be upgraded.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.VulDB Recent EntriesRead More