PT-2026-55784 · Ruijie · Rg-Uac

Bigbrother_Man · Publicado 2026-07-05 · Atualizado 2026-07-05 · CVE-2026-14736

Mitre

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user auth commit.php. Performing a manipulation of the argument upload image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Exploit

Correção

Improper Access Control

Unrestricted File Upload

Enumeração de Fraquezas

CWE-284

CWE-434

Identificadores relacionados

CVE-2026-14736

Produtos afetados

Rg-Uac

Referências · 6

• 🔥 https://ucn9h68n9289.feishu.cn/wiki/OiAKwH3hRi3oVpkQyeycjjPrnL8?fromScene=spaceOverview · Exploit
• https://vuldb.com/cve/CVE-2026-14736 · Nota
• https://vuldb.com/vuln/376318/cti · Nota
• https://vuldb.com/submit/848624 · Nota
• https://vuldb.com/vuln/376318 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-14736 · Nota de Segurança