PT-2026-55784 · Ruijie · Rg-Uac

Bigbrother_Man · Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14736

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user auth commit.php. Performing a manipulation of the argument upload image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Exploit

Fix

Improper Access Control

Unrestricted File Upload

Weakness Enumeration

CWE-284

CWE-434

Related Identifiers

CVE-2026-14736

Affected Products

Rg-Uac

References · 6

• 🔥 https://ucn9h68n9289.feishu.cn/wiki/OiAKwH3hRi3oVpkQyeycjjPrnL8?fromScene=spaceOverview · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14736 · Security Note
• https://vuldb.com/cve/CVE-2026-14736 · Note
• https://vuldb.com/vuln/376318/cti · Note
• https://vuldb.com/submit/848624 · Note
• https://vuldb.com/vuln/376318 · Note