TVN ID	TVN-202608007
CVE ID	CVE-2026-78685
CVSS	8.8 (High) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products	Le-yan versions from 2.4.2.8 to 2.5.1.9
Description	Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page.
Solution	Update to version 2.5.2.0 or later
Public Date	2026-08-25