Le-yan vulnerabilities
Published CVEs affecting Le-yan products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-82181
Medium · 5.5
CWE-598 Aug 28, 2026
Le-yan|Medical Practice Management System - Sensitive Data in URL
Medical Practice Management System developed by Le-yan has a Sensitive Data in URL vulnerability. Unauthenticated remote attackers can obtain sensitive information via victim's browser history or log files.
CVE-2026-78685
High · 8.8
CWE-940 Aug 25, 2026
Le-yan|Medical Practice Management System - Remote Code Execution
Medical Practice Management System developed by Le-yan has a Remote Code Execution vulnerability. Unauthenticated remote attackers can execute arbitrary OS commamnds via a crafted HTML page.