CVE-2026-78685

HighCVSS 8.8

Published: 25/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 25/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

Summary

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commands via a crafted HTML page.

Risk Assessment

This can lead to full system compromise, including access to sensitive patient medical data.

Recommendation

Immediately update the system to a patched version. Restrict access to the system to trusted networks only.

Other vulnerabilities in Medical Practice Management System

CVE-2026-82181Medium
The Medical Practice Management System developed by Le-yan has a sensitive data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files.

Original NVD description (English source)

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page.