High severity8.8NVD Advisory· Published Aug 25, 2026

CVE-2026-78685

Description

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page.

Affected products

Le Yan Co., Ltd./Le-show medical practice management systemllm-fuzzy

Patches

Vulnerability mechanics

References

www.twcert.org.tw/en/cp-139-11128-8bd30-2.htmlnvd
www.twcert.org.tw/tw/cp-132-11127-cda76-1.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000