EUVD-2026-125252

NocoDB before 2026.09.0 contains a stored cross-site scripting vulnerability that allows authenticated Editor users to execute scripts by storing crafted attachment MIME types like text/html;image/png. Attackers can write the value through the records API so the /dltemp signed URL serves HTML...

CVE-2026-126269

NocoDB versions prior to 2026.09.0 are vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue arises because the software fails to properly neutralize input during web page generation, specifically regarding attachment MIME types . An authenticated Editor user can use the records API t...

PT-2026-146600

Name of the Vulnerable Software and Affected Versions NocoDB versions prior to 2026.09.0 Description An authenticated Editor user can execute scripts by storing crafted attachment MIME types, such as text/html;image/png. This is achieved by writing values through the records API, which causes the...

CVE-2026-8031 PicoTronica e-Clinic Healthcare System ECHS API Endpoint patient-records missing authentication

A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affected element is an unknown function of the file /cdemos/echs/api/v2/patient-records of the component API Endpoint. The manipulation results in missing authentication. The attack can be executed remotely. The...

CVE-2026-8031

A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affected element is an unknown function of the file /cdemos/echs/api/v2/patient-records of the component API Endpoint. The manipulation results in missing authentication. The attack can be executed remotely. The...

PicoTronica e-Clinic Healthcare System ECHS Authorization Issue Vulnerability

PicoTronica e-Clinic Healthcare System ECHS is a medical clinic management system developed by the British company PicoTronica. Version 5.7 of the PicoTronica e-Clinic Healthcare System ECHS contains an authorization vulnerability. This vulnerability stems from an unknown function in the API...