Posting Date: 2026/09/03

【Vulnerability Alert】LOHAN CO., LTD.｜Leching Healthcare Management System - Remote Code Execution

  • Subject: 【Vulnerability Alert】LOHAN CO., LTD.｜Leching Healthcare Management System - Remote Code Execution


  • Content:
    • Forwarded from Taiwan Computer Emergency Response Team/Coordination Center Security Alert TWCERTCC-200-202608-00000019
    • 【LOHAN CO., LTD.｜Leching Healthcare Management System - Remote Code Execution】(CVE-2026-78685, CVSS: 8.8) The Leching Healthcare Management System developed by LOHAN CO., LTD. has a Remote Code Execution vulnerability. An unauthenticated remote attacker can exploit this vulnerability via a specially crafted HTML page to execute arbitrary operating system commands.
  • Affected Platforms:
    • Leching Healthcare Management System versions 2.4.2.8 through 2.5.1.9
  • Recommendations:
    • Update to version 2.5.2.0 or later
  • References:
    1. https://www.twcert.org.tw/tw/cp-132-11127-cda76-1.html

Computer and Communication Center
Network System Division