CVE-2026-14736

HighCVSS 7.3/10Last modified Oct 25, 2026

Description

A vulnerability was found in Ruijie RG-UAC up to 1.0-R1.8.2.p5. The impacted element is an unknown function of the file user_auth_commit.php. Performing a manipulation of the argument upload_image results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-284CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Jul 5, 2026
Last modified
Oct 25, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-147377.3A vulnerability was identified in Hanwang e-Face General Management Platform 6.3.5.4. This impacts an unknown function of the file /sysAuthSCVE-2026-147383.7A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function _image_cache_key of the file src/exo/worker/enCVE-2026-147399.8DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-14747.5An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by GabinetCVE-2026-147409.1DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalCVE-2026-147417.5HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date. parse_date() matches the datCVE-2026-147423.1A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the function _freeze of the file libs/langgrapCVE-2026-147437.3A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeCVE-2026-147447.3A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.pCVE-2026-147457.3A weakness has been identified in code-projects Real State Services 1.0. This impacts an unknown function of the file /single-list_rent.php.CVE-2026-147467.3A security vulnerability has been detected in code-projects Real State Services 1.0. Affected is an unknown function of the file /addprojectCVE-2026-147477.3A vulnerability was detected in code-projects Real State Services 1.0. Affected by this vulnerability is an unknown functionality of the fil