CVE-2026-14736: Ruijie Rg-Uac

High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Performing a manipulation of the argument upload_image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Affected products

• Ruijie Rg-Uac: version 1.0-R1.8.2.p5 only

Published 2026-07-05. Last modified 2026-07-06.