Product
The Le-yan Medical Practice Management System contains a remote code execution vulnerability (CVE-2026-78685) allowing unauthenticated attackers to execute arbitrary OS commands via a crafted HTML page.