Forwarded Taiwan Computer Network Emergency Response Team/Coordination Center Information Security Alert TWCERTCC-200-202608-00000019

[Content Description]
【Le-yan｜Medical Practice Management System- Remote Code Execution】(CVE-2026-78685, CVSS: 8.8) The Leqing Medical Management System developed by Le-yan contains a Remote Code Execution vulnerability. An unauthenticated remote attacker can exploit a specially crafted HTML webpage to execute arbitrary operating system commands.

[Impacted Platform]
Le-yan versions from 2.4.2.8 to 2.5.1.9

[Recommended Actions]
Update to version 2.5.2.0 or later

[Reference]
1. https://www.twcert.org.tw/tw/cp-132-11127-cda76-1.html