The vulnerability identified as CVE-2026-7852 in Limatek System Inc.'s LimRAD NAC product involves unrestricted file upload of dangerous file types, categorized under CWE-434. This flaw enables remote code inclusion, which can allow an attacker to execute arbitrary code on the affected system. The issue affects all versions prior to 5.5.7.3.9. The CVSS v3.1 base score is 9.8, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor action or user mitigation.

Successful exploitation of this vulnerability can lead to remote code execution on the affected system, compromising confidentiality, integrity, and availability of the LimRAD NAC product. This could allow attackers to take full control of the system, potentially leading to data breaches, system disruption, or further network compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is currently documented, users should monitor vendor communications closely. Until a patch is available, restricting file upload permissions, implementing strict file type validation, and isolating the affected system may help reduce risk.