What’s Vulnerable › Vulnerabilities

CVE-2026-23699

• Severity: high (CVSS 8.6 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-22 · updated 2026-06-17
• Weakness: CWE-78

Description

AP180 series with firmware versions prior to AP_RGOS 11.9(4)B1P8 contains an OS command injection vulnerability. If this vulnerability is exploited, arbitrary commands may be executed on the devices.

Affected products

• Ruijie Networks Co., Ltd. AP180-AC V1.xx: before AP_RGOS 11.9(4)B1P8
• Ruijie Networks Co., Ltd. AP180-AC V2.xx: before AP_RGOS 11.9(4)B1P8
• Ruijie Networks Co., Ltd. AP180-AC V3.xx: before AP_RGOS 11.9(4)B1P8
• Ruijie Networks Co., Ltd. AP180-PE V1.xx: before AP_RGOS 11.9(4)B1P8
• Ruijie Networks Co., Ltd. AP180-PE V2.xx: before AP_RGOS 11.9(4)B1P8
• Ruijie Networks Co., Ltd. AP180-PE V3.xx: before AP_RGOS 11.9(4)B1P8
• Ruijie Networks Co., Ltd. AP180(JA) V1.xx: before AP_RGOS 11.9(4)B1P8
• Ruijie Networks Co., Ltd. AP180(JA) V2.xx: before AP_RGOS 11.9(4)B1P8
• Ruijie Networks Co., Ltd. AP180(JP) V1.xx: before AP_RGOS 11.9(4)B1P8

References

• https://jvn.jp/en/jp/JVN86850670/
• https://www.ruijie.co.jp/products/rg-ap180-pe_p432111650928590848.html#productDocument

Get alerted when CVE-2026-23699 or the next vulnerability affects your stack