Ruijie

Products

ProductCVEsExploitedLatest
RG-UAC26–Jul 5, 2026
Reyee OS10–Dec 6, 2024
RG-EW1200G3–Aug 18, 2023
RG-ES210GC-LP2–Nov 1, 2026
RG-ES210GS-P2–Nov 1, 2026
RG-EW3000GX2–Sep 16, 2026
RG-NBS2009G-P2–Mar 19, 2024
RG-ES205GC2–Nov 1, 2026
RG-EG3502–Mar 26, 2024
RG-ES206GC-P2–Nov 1, 2026
RG-ES208GC2–Nov 1, 2026
WS7204-A1–Aug 25, 2025
BCR810W1–Jul 10, 2023
EG105G-P1–Jun 14, 2026
EG2000K1–Aug 26, 2024
EG306MG1–Aug 9, 2025
NBR Router1–Jul 2, 2025
NBR2100G-E1–Sep 29, 2025
ReyeeOS1–Dec 15, 2025
RG-BCR8601–Jun 28, 2023
6000-E101–Sep 22, 2025

Exploited and recent CVEs

  • CVE-2026-120242 Low 2.4 Ruijie RG-ES205GC Cloud Management set_cloud_serverUrl.cgi cross site scripting 0.2%
  • CVE-2026-120242 Low 2.4 Ruijie RG-ES205GC Cloud Management set_cloud_serverUrl.cgi cross site scripting 0.2%
  • CVE-2026-120242 Low 2.4 Ruijie RG-ES205GC Cloud Management set_cloud_serverUrl.cgi cross site scripting 0.2%
  • CVE-2026-120242 Low 2.4 Ruijie RG-ES205GC Cloud Management set_cloud_serverUrl.cgi cross site scripting 0.2%
  • CVE-2026-120242 Low 2.4 Ruijie RG-ES205GC Cloud Management set_cloud_serverUrl.cgi cross site scripting 0.2%
  • CVE-2026-120241 High 7.5 Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow 0.6%
  • CVE-2026-120241 High 7.5 Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow 0.6%
  • CVE-2026-120241 High 7.5 Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow 0.6%
  • CVE-2026-120241 High 7.5 Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow 0.6%
  • CVE-2026-120241 High 7.5 Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow 0.6%
  • CVE-2026-92398 Critical 9.1 Ruijie RG-EW3000GX user_list_note admin os command injection 3.2%
  • CVE-2026-92397 Critical 9.1 Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection 3.2%
  • CVE-2026-14736 High 7.3 Ruijie RG-UAC user_auth_commit.php unrestricted upload 0.5%
  • CVE-2026-12197 High 7.2 Ruijie EG105G-P JSON-RPC Diagnose Endpoint diagnose nslookup command injection 3.2%
  • CVE-2023-53881 Critical 9.2 ReyeeOS 1.204.1614 Man-in-the-Middle Remote Code Execution via CWMP 0.3%
  • CVE-2025-11141 Medium 4.7 Ruijie NBR2100G-E branch_passw.php listAction os command injection 3.8%
  • CVE-2025-10774 Medium 4.7 Ruijie 6000-E10 sub_commit.php os command injection 3.3%
  • CVE-2025-9424 Medium 4.7 Ruijie WS7204-A branch_import.php os command injection 15.2%
  • CVE-2025-8763 Low 3.7 Ruijie EG306MG strongSwan strongswan.conf missing encryption 0.2%
  • CVE-2025-34057 High 8.7 Ruijie NBR Router Administrative Credential Disclosure 10.1%
  • CVE-2024-47146 Medium 6.5 Ruijie Reyee OS Resource Leak 0.3%
  • CVE-2024-52324 Critical 9.8 Ruijie Reyee OS Use of Inherently Dangerous Function 0.7%
  • CVE-2024-48874 Critical 9.8 Ruijie Reyee OS Server-Side Request Forgery 0.6%
  • CVE-2024-46874 High 8.1 Ruijie Reyee OS Improper Handling of Insufficient Permissions or Privileges 0.4%
  • CVE-2024-47791 High 7.5 Ruijie Reyee OS Improper Neutralization of Wildcards or Matching Symbols 0.4%
  • CVE-2024-45722 High 7.5 Ruijie Reyee OS Use of Weak Credentials 0.5%
  • CVE-2024-47043 High 7.5 Ruijie Reyee OS Insecure Storage of Sensitive Information 0.4%
  • CVE-2024-51727 Medium 6.5 Ruijie Reyee OS Premature Release of Resource During Expected Lifetime 0.5%
  • CVE-2024-42494 Medium 6.5 Ruijie Reyee OS Exposure of Private Personal Information to an Unauthorized Actor 0.4%
  • CVE-2024-47547 Critical 9.4 Ruijie Reyee OS Weak Password Recovery Mechanism for Forgotten Password 0.7%