Is CVE-2026-78685 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-78685?

CVE-2026-78685 has a CVSS v3 severity of HIGH (8.8).

Back

CVE-2026-78685

Description

Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page.