CVE-2026-23699: Ruijie Networks Co., Ltd AP180-Ac v1.xx

High severity, CVSS 8.6. EPSS: 1.6% chance of exploitation in the next 30 days.

AP180 series with firmware versions prior to AP_RGOS 11.9(4)B1P8 contains an OS command injection vulnerability. If this vulnerability is exploited, arbitrary commands may be executed on the devices.

Affected products

• Ruijie Networks Co., Ltd AP180-Ac v1.xx
• Ruijie Networks Co., Ltd AP180-Ac v2.xx
• Ruijie Networks Co., Ltd AP180-Ac v3.xx
• Ruijie Networks Co., Ltd AP180-Pe v1.xx
• Ruijie Networks Co., Ltd AP180-Pe v2.xx
• Ruijie Networks Co., Ltd AP180-Pe v3.xx
• Ruijie Networks Co., Ltd AP180JA v1.xx
• Ruijie Networks Co., Ltd AP180JA v2.xx
• Ruijie Networks Co., Ltd AP180JP v1.xx

Published 2026-01-22. Last modified 2026-06-17.