Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

RG-UAC — Vulnerabilities & Security Advisories 27

All 27 CVE vulnerabilities found in RG-UAC, with AI-generated Chinese analysis, references, and POCs.

This page is a vulnerability aggregation resource for the vendor Sangfor, focusing specifically on the RG-UAC product and covering weakness types such as unauthorized access, information disclosure, and remote code execution. It collects security issues reported across various versions of RG-UAC, including firewall and secure gateway modules, spanning a time range from early software releases through to the most recent updates in 2024. By organizing these findings chronologically and by severity, the resource allows security professionals to track a vendor's advisory history and understand the evolution of specific weakness classes within this network security infrastructure. Users can look up a product's vulnerability history to assess risk exposure, analyze recurring defect patterns, and evaluate the effectiveness of past patches. This centralized view helps administrators and researchers correlate multiple reports, understand the context of each flaw, and make informed decisions about mitigation strategies without navigating fragmented sources. The content is structured to facilitate efficient searching and filtering, enabling users to quickly identify critical issues relevant to their deployed versions. By providing a comprehensive overview of known flaws, this aggregation supports proactive security management and reduces the time required to assess the current threat landscape for Sangfor RG-UAC deployments. The information presented is derived from official advisories and verified third-party disclosures, ensuring accuracy and reliability for technical analysis.

Vendor: Ruijie

CVE IDTitleCVSSSeverityPublished
CVE-2026-14736 Ruijie RG-UAC user_auth_commit.php unrestricted upload CWE-434 7.3 High2026-07-05
CVE-2023-7304 Ruijie RG-UAC nmc_sync.php Command Injection CWE-78 9.8AICriticalAI2025-10-15
CVE-2024-6269 Ruijie RG-UAC HTTP POST Request sxh_vpnlic.php get_ip.addr_details command injection CWE-77 4.7 Medium2024-06-23
CVE-2024-6187 Ruijie RG-UAC sub_commit.php os command injection CWE-78 6.3 Medium2024-06-20
CVE-2024-6186 Ruijie RG-UAC commit.php os command injection CWE-78 6.3 Medium2024-06-20
CVE-2024-6185 Ruijie RG-UAC commit.php get_ip_addr_details os command injection CWE-78 6.3 Medium2024-06-20
CVE-2024-6184 Ruijie RG-UAC reboot_commit.php os command injection CWE-78 6.3 Medium2024-06-20
CVE-2024-5340 Ruijie RG-UAC sub_commit.php os command injection CWE-78 4.7 Medium2024-05-25
CVE-2024-5339 Ruijie RG-UAC online_check.php os command injection CWE-78 4.7 Medium2024-05-25
CVE-2024-5338 Ruijie RG-UAC online.php os command injection CWE-78 4.7 Medium2024-05-25
CVE-2024-5337 Ruijie RG-UAC user_commit.php os command injection CWE-78 4.7 Medium2024-05-25
CVE-2024-5336 Ruijie RG-UAC vlan_add_commit.php addVlan os command injection CWE-78 4.7 Medium2024-05-25
CVE-2024-4816 Ruijie RG-UAC gre_add_commit.php os command injection CWE-78 6.3 Medium2024-05-13
CVE-2024-4815 Ruijie RG-UAC detail.php os command injection CWE-78 6.3 Medium2024-05-13
CVE-2024-4814 Ruijie RG-UAC static_route_edit_commit.php os command injection CWE-78 6.3 Medium2024-05-13
CVE-2024-4813 Ruijie RG-UAC interface_commit.php os command injection CWE-78 6.3 Medium2024-05-13
CVE-2024-4510 Ruijie RG-UAC arp_add_commit.php os command injection CWE-78 4.7 Medium2024-05-06
CVE-2024-4509 Ruijie RG-UAC add_commit.php os command injection CWE-78 4.7 Medium2024-05-06
CVE-2024-4508 Ruijie RG-UAC static_route_edit_ipv6.php os command injection CWE-78 4.7 Medium2024-05-06
CVE-2024-4507 Ruijie RG-UAC static_route_add_ipv6.php os command injection CWE-78 4.7 Medium2024-05-05
CVE-2024-4506 Ruijie RG-UAC ip_addr_edit_commit.php os command injection CWE-78 4.7 Medium2024-05-05
CVE-2024-4505 Ruijie RG-UAC ip_addr_add_commit.php os command injection CWE-78 4.7 Medium2024-05-05
CVE-2024-4504 Ruijie RG-UAC commit.php os command injection CWE-78 4.7 Medium2024-05-05
CVE-2024-4503 Ruijie RG-UAC dhcp_relay_commit.php os command injection CWE-78 4.7 Medium2024-05-05
CVE-2024-4502 Ruijie RG-UAC dhcp_client_commit.php os command injection CWE-78 4.7 Medium2024-05-05
CVE-2024-4501 Ruijie RG-UAC commit.php os command injection CWE-78 4.7 Medium2024-05-05
CVE-2024-4255 Ruijie RG-UAC gre_edit_commit.php os command injection CWE-78 4.7 Medium2024-04-27

All 27 known CVE vulnerabilities affecting RG-UAC with full Chinese analysis, references, and POCs where available.