---
title: "Ruijie RG-UAC vulnerabilities and CVEs"
url: https://radicalnotion.ai/vendor/ruijie/rg-uac
type: product
description: "Ruijie RG-UAC has 28 published CVEs, 0 in CISA KEV and 27 with public exploits."
updated: 2026-07-05
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Ruijie RG-UAC vulnerabilities

Vendor: [Ruijie](https://radicalnotion.ai/vendor/ruijie)

- **Published CVEs:** 28
- **In CISA KEV:** 0
- **With a public exploit:** 27
- **With a patch:** 16
- **Average CVSS:** 6.3
- **First CVE:** 2021-11-16
- **Latest CVE:** 2026-07-05

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 1 |
| High | 12 |
| Medium | 15 |
| Low | 0 |
| Unscored | 0 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-78](https://radicalnotion.ai/cwe/cwe-78) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | 25 |
| [CWE-434](https://radicalnotion.ai/cwe/cwe-434) | Unrestricted Upload of File with Dangerous Type | 1 |
| [CWE-77](https://radicalnotion.ai/cwe/cwe-77) | Improper Neutralization of Special Elements used in a Command ('Command Injection') | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2021 | 1 |
| 2022 | 0 |
| 2023 | 0 |
| 2024 | 25 |
| 2025 | 1 |
| 2026 | 1 |

## Affected versions

| Version | Kind | CVEs |
| --- | --- | --- |
| \>= 20240428 | range | 10 |
| \>= 1.0 | range | 5 |
| \>= 20240516 | range | 5 |
| \>= 20240506 | range | 4 |
| \< 20240516 | range | 3 |
| \< 20240428 | range | 1 |
| \>= 1.0-R1.8.2.p5 | range | 1 |
| \>= 20240419 | range | 1 |
| 1.0 | range | 1 |
| 20240516 | patched | 3 |
| 20240428 | patched | 1 |

## CVEs

| CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-14736 | Ruijie RG-UAC user\_auth\_commit.php unrestricted upload | medium | 6.9 | No | Yes | No |
| CVE-2023-7304 | Ruijie RG-UAC nmc\_sync.php Command Injection | critical | 9.3 | No | Yes | No |
| CVE-2024-6269 | Ruijie RG-UAC HTTP POST Request sxh\_vpnlic.php get\_ip.addr\_details command injection | medium | 5.1 | No | Yes | No |
| CVE-2024-6187 | Ruijie RG-UAC sub\_commit.php os command injection | medium | 5.3 | No | Yes | No |
| CVE-2024-6186 | Ruijie RG-UAC commit.php os command injection | medium | 5.3 | No | Yes | No |
| CVE-2024-6185 | Ruijie RG-UAC commit.php get\_ip\_addr\_details os command injection | medium | 5.3 | No | Yes | No |
| CVE-2024-6184 | Ruijie RG-UAC reboot\_commit.php os command injection | medium | 5.3 | No | Yes | No |
| CVE-2024-5340 | Ruijie RG-UAC sub\_commit.php os command injection | medium | 5.1 | No | Yes | Yes |
| CVE-2024-5339 | Ruijie RG-UAC online\_check.php os command injection | medium | 5.1 | No | Yes | No |
| CVE-2024-5338 | Ruijie RG-UAC online.php os command injection | medium | 5.1 | No | Yes | Yes |
| CVE-2024-5337 | Ruijie RG-UAC user\_commit.php os command injection | medium | 5.1 | No | Yes | Yes |
| CVE-2024-5336 | Ruijie RG-UAC vlan\_add\_commit.php addVlan os command injection | medium | 5.1 | No | Yes | Yes |
| CVE-2024-4816 | Ruijie RG-UAC gre\_add\_commit.php os command injection | medium | 5.3 | No | Yes | Yes |
| CVE-2024-4815 | Ruijie RG-UAC detail.php os command injection | medium | 5.3 | No | Yes | No |
| CVE-2024-4814 | Ruijie RG-UAC static\_route\_edit\_commit.php os command injection | medium | 5.3 | No | Yes | Yes |
| CVE-2024-4813 | Ruijie RG-UAC interface\_commit.php os command injection | medium | 5.3 | No | Yes | Yes |
| CVE-2024-4510 | Ruijie RG-UAC arp\_add\_commit.php os command injection | high | 7.2 | No | Yes | Yes |
| CVE-2024-4509 | Ruijie RG-UAC add\_commit.php os command injection | high | 7.2 | No | Yes | Yes |
| CVE-2024-4508 | Ruijie RG-UAC static\_route\_edit\_ipv6.php os command injection | high | 7.2 | No | Yes | No |
| CVE-2024-4507 | Ruijie RG-UAC static\_route\_add\_ipv6.php os command injection | high | 7.2 | No | Yes | No |
| CVE-2024-4506 | Ruijie RG-UAC ip\_addr\_edit\_commit.php os command injection | high | 7.2 | No | Yes | Yes |
| CVE-2024-4505 | Ruijie RG-UAC ip\_addr\_add\_commit.php os command injection | high | 7.2 | No | Yes | Yes |
| CVE-2024-4504 | Ruijie RG-UAC commit.php os command injection | high | 7.2 | No | Yes | Yes |
| CVE-2024-4503 | Ruijie RG-UAC dhcp\_relay\_commit.php os command injection | high | 7.2 | No | Yes | Yes |
| CVE-2024-4502 | Ruijie RG-UAC dhcp\_client\_commit.php os command injection | high | 7.2 | No | Yes | Yes |
| CVE-2024-4501 | Ruijie RG-UAC commit.php os command injection | high | 7.2 | No | Yes | Yes |
| CVE-2024-4255 | Ruijie RG-UAC gre\_edit\_commit.php os command injection | high | 7.2 | No | Yes | Yes |
| CVE-2020-21627 | - | high | 7.5 | No | No | No |

## Frequently asked questions

### How many CVEs does Ruijie RG-UAC have?

Ruijie RG-UAC has 28 published CVE records since 2021.

### How many Ruijie RG-UAC CVEs are in CISA KEV?

None of Ruijie RG-UAC's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Are there public exploits for Ruijie RG-UAC vulnerabilities?

Yes — 27 of Ruijie RG-UAC's CVEs have a known public exploit.

### Which versions of Ruijie RG-UAC are affected?

11 distinct Ruijie RG-UAC versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

### What are the most common weakness types in Ruijie RG-UAC CVEs?

Ruijie RG-UAC's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).

### How many critical Ruijie RG-UAC vulnerabilities are there?

Ruijie RG-UAC has 1 critical and 12 high-severity CVEs.

### What is the average severity of Ruijie RG-UAC CVEs?

The average CVSS base score across Ruijie RG-UAC's scored CVEs is 6.3.

## Other products from this vendor

- [rg-uac 6000-e50](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-e50) (21 CVEs)
- [rg-uac 6000-e50 firmware](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-e50-firmware) (21 CVEs)
- [rg-uac 6000-cc](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-cc) (20 CVEs)
- [rg-uac 6000-cc firmware](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-cc-firmware) (20 CVEs)
- [rg-uac 6000-e10](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-e10) (20 CVEs)
- [rg-uac 6000-e10c](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-e10c) (20 CVEs)
- [rg-uac 6000-e10c firmware](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-e10c-firmware) (20 CVEs)
- [rg-uac 6000-e10 firmware](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-e10-firmware) (20 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/ruijie/rg-uac). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.