Ruijie vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-92398 A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380.High 8.5 · Sep 16, 2026
• CVE-2026-92397 A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380.High 8.5 · Sep 16, 2026
• CVE-2026-12197 A security flaw has been discovered in Ruijie EG105G-P 2.340.High 7.3 · Jun 14, 2026
• CVE-2023-53881 ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manipulate device communication through a manCritical 9.2 · Dec 15, 2025
• CVE-2025-56130 OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to tHigh 8.8 · Dec 11, 2025
• CVE-2025-56129 OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_diagnosiHigh 8.8 · Dec 11, 2025
• CVE-2025-56127 OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the get_wanobj in High 8.8 · Dec 11, 2025
• CVE-2025-56124 OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST requHigh 7.8 · Dec 11, 2025
• CVE-2025-56123 OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafteHigh 8.8 · Dec 11, 2025
• CVE-2025-56122 OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST rHigh 8.8 · Dec 11, 2025
• CVE-2025-56120 OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST requHigh 8.8 · Dec 11, 2025
• CVE-2025-56118 OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST requHigh 8.8 · Dec 11, 2025
• CVE-2025-56117 OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduHigh 8.8 · Dec 11, 2025
• CVE-2025-56114 OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to thHigh 8.8 · Dec 11, 2025
• CVE-2025-56113 OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx allowing attackers to execute arbitrary commands via a crafted POHigh 8.8 · Dec 11, 2025
• CVE-2025-56111 OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the network_set_wanHigh 8.8 · Dec 11, 2025
• CVE-2025-56110 OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_deal_updHigh 8.8 · Dec 11, 2025
• CVE-2025-56109 OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_wirelessHigh 8.8 · Dec 11, 2025
• CVE-2025-56108 OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmHigh 8.8 · Dec 11, 2025
• CVE-2025-56107 OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the submit_wifi inHigh 8.8 · Dec 11, 2025
• CVE-2025-56106 OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request tHigh 8.8 · Dec 11, 2025
• CVE-2025-56102 OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request tHigh 8.8 · Dec 11, 2025
• CVE-2025-56101 OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to thHigh 8.8 · Dec 11, 2025
• CVE-2025-56099 OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pHigh 8.8 · Dec 11, 2025
• CVE-2025-56098 OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduHigh 8.8 · Dec 11, 2025