【Vulnerability Alert】LOHAN CO., LTD.｜Leching Healthcare Management System - Remote Code Execution

• Subject: 【Vulnerability Alert】LOHAN CO., LTD.｜Leching Healthcare Management System - Remote Code Execution

• Content:
  • Forwarded from Taiwan Computer Emergency Response Team/Coordination Center Security Alert TWCERTCC-200-202608-00000019
  • 【LOHAN CO., LTD.｜Leching Healthcare Management System - Remote Code Execution】(CVE-2026-78685, CVSS: 8.8) The Leching Healthcare Management System developed by LOHAN CO., LTD. has a Remote Code Execution vulnerability. An unauthenticated remote attacker can exploit this vulnerability via a specially crafted HTML page to execute arbitrary operating system commands.
• Affected Platforms:
  • Leching Healthcare Management System versions 2.4.2.8 through 2.5.1.9
• Recommendations:
  • Update to version 2.5.2.0 or later
• References:
  1. https://www.twcert.org.tw/tw/cp-132-11127-cda76-1.html

Computer and Communication Center
Network System Division