Ruijie
Vulnerability activity for Ruijie: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 2
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 4
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 43
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 2.4LowNov 1, 2026Ruijie RG-ES205GC XSSCVE-2026-120242A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. The affected element is an unknown function of the file set_cloud_serverUrl.cgi of the component Cloud Management. The manipulation of the argument url results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not
- 7.5HighNov 1, 2026Ruijie RG-ES205GC Memory corruptionCVE-2026-120241A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
- 9.1CriticalSep 16, 2026Ruijie RG-EW3000GX Code / command injectionCVE-2026-92398A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
- 9.1CriticalSep 16, 2026Ruijie RG-EW3000GX Code / command injectionCVE-2026-92397A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerability is the function cc_set of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
- 8.8HighDec 11, 2025Ruijie rg-nbs5100-24gt4sfp firmware Code / command injectionCVE-2025-56130OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the module_update in file /usr/local/lua/dev_config/ace_sw.lua.2.1% likely
- 8.8HighDec 11, 2025Ruijie rg-bcr860 firmware Code / command injectionCVE-2025-56129OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_diagnosis in file /usr/lib/lua/luci/controller/admin/diagnosis.lua.2.6% likely
- 8.8HighDec 11, 2025Ruijie rg-bcr600w firmware Code / command injectionCVE-2025-56127OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the get_wanobj in file /usr/lib/lua/luci/controller/admin/common.lua.3.1% likely
- 7.8HighDec 11, 2025Ruijie rg-x60 pro firmware Code / command injectionCVE-2025-56124OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.1.3% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1200g pro firmware Code / command injectionCVE-2025-56123OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.2.6% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1800gx firmware Code / command injectionCVE-2025-56122OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.2.6% likely
- 8.8HighDec 11, 2025Ruijie rg-x60 pro firmware Code / command injectionCVE-2025-56120OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.2.6% likely
- 8.8HighDec 11, 2025Ruijie rg-ew3200gx firmware Code / command injectionCVE-2025-56118OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.2.6% likely
- 8.8HighDec 11, 2025Ruijie x30 pro firmware Code / command injectionCVE-2025-56117OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.3.1% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1300g firmware Code / command injectionCVE-2025-56114OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.2.6% likely
- 8.8HighDec 11, 2025Ruijie rg-yst250f firmware Code / command injectionCVE-2025-56113OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.1.7% likely
- 8.8HighDec 11, 2025Ruijie rg-bcr860 firmware Code / command injectionCVE-2025-56111OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the network_set_wan_conf in file /usr/lib/lua/luci/controller/admin/netport.lua.3.1% likely
- 8.8HighDec 11, 2025Ruijie rg-bcr860 firmware Code / command injectionCVE-2025-56110OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_deal_update in file /usr/lib/lua/luci/controller/api/rcmsAPI.lua.3.1% likely
- 8.8HighDec 11, 2025Ruijie rg-bcr860 firmware Code / command injectionCVE-2025-56109OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_wireless in file /usr/lib/lua/luci/control/admin/wireless.lua.3.1% likely
- 8.8HighDec 11, 2025Ruijie x30 pro firmware Code / command injectionCVE-2025-56108OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.2.7% likely
- 8.8HighDec 11, 2025Ruijie rg-bcr600w firmware Code / command injectionCVE-2025-56107OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the submit_wifi in file /usr/lib/lua/luci/controller/admin/common_quick_config.lua.2.3% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1800gx firmware Code / command injectionCVE-2025-56106OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.2.8% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1800gx firmware Code / command injectionCVE-2025-56102OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.2.6% likely
- 8.8HighDec 11, 2025Ruijie m18-ew firmware Code / command injectionCVE-2025-56101OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.2.8% likely
- 8.8HighDec 11, 2025Ruijie rg-yst250f firmware Code / command injectionCVE-2025-56099OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.1.7% likely
- 8.8HighDec 11, 2025Ruijie x30 pro firmware Code / command injectionCVE-2025-56098OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.2.6% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1800gx pro firmware Code / command injectionCVE-2025-56097OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.2.6% likely
- 8.8HighDec 11, 2025Ruijie rg-bcr600w firmware Code / command injectionCVE-2025-56096OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the restart_modules in file /usr/lib/lua/luci/controller/admin/common.lua.2% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1200g pro firmware Code / command injectionCVE-2025-56095OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.2.8% likely
- 8.8HighDec 11, 2025Ruijie x30 pro firmware Code / command injectionCVE-2025-56094OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/host_access_delay.lua.3.3% likely
- 8.8HighDec 11, 2025Ruijie x30 pro firmware Code / command injectionCVE-2025-56093OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the setWisp in file /usr/lib/lua/luci/modules/wireless.lua.3.2% likely
- 8.8HighDec 11, 2025Ruijie rg-ew300t firmware Code / command injectionCVE-2025-56092OS Command Injection vulnerability in Ruijie X30 PRO V1 X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.2.8% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1800gx firmware Code / command injectionCVE-2025-56091OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.2.9% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1200g pro firmware Code / command injectionCVE-2025-56090OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.2.9% likely
- 8.8HighDec 11, 2025Ruijie m18-ew firmware Code / command injectionCVE-2025-56089OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.2.8% likely
- 8.8HighDec 11, 2025Ruijie rg-bcr860 firmware Code / command injectionCVE-2025-56088OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_service in file /usr/lib/lua/luci/controller/admin/service.lua.3.5% likely
- 8.8HighDec 11, 2025Ruijie rg-bcr600w firmware Code / command injectionCVE-2025-56087OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the run_tcpdump in file /usr/lib/lua/luci/controller/admin/common_tcpdump.lua.2.4% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1200 firmware Code / command injectionCVE-2025-56086OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.2.9% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1200 firmware Code / command injectionCVE-2025-56085OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.2.9% likely
- 8.8HighDec 11, 2025Ruijie rg-yst250f firmware Code / command injectionCVE-2025-56084OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.2.1% likely
- 8.8HighDec 11, 2025Ruijie rg-yst250f firmware Code / command injectionCVE-2025-56083OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua.2% likely
- 8.8HighDec 11, 2025Ruijie rg-bcr600w firmware Code / command injectionCVE-2025-56082OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the check_changes in file /usr/lib/lua/luci/controller/admin/common.lua.2.4% likely
- 8.8HighDec 11, 2025Ruijie rg-ew1300g firmware Code / command injectionCVE-2025-56079OS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.2.8% likely
- 7.2HighDec 8, 2025Ruijie rg-ap720-l firmware Code / command injectionCVE-2025-65363Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the web_action.do endpoint.6.7% likelyDetection
Top products
- x30 pro firmware5 CVEs in the last year
- rg-bcr860 firmware5 CVEs in the last year
- rg-bcr600w firmware5 CVEs in the last year
- rg-yst250f firmware4 CVEs in the last year
- rg-ew1800gx firmware4 CVEs in the last year
- rg-ew1200g pro firmware3 CVEs in the last year
- rg-x60 pro firmware2 CVEs in the last year
- RG-EW3000GX2 CVEs in the last year, 2 critical
- rg-ew1300g firmware2 CVEs in the last year
- rg-ew1200 firmware2 CVEs in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.