CVE-2026-92398

CriticalCVSS 9.1

Published: 16/09/2026(UTC)Updated: 16/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Summary

A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380 within the user_list_note module in the file /etc/rg_config/admin. Manipulation of the Name argument leads to OS command injection. The attack can be performed remotely, and the exploit has been publicly disclosed.

Risk Assessment

Since the exploit is publicly available, any network-adjacent attacker can remotely execute arbitrary commands on the device. This could lead to full compromise of the router and the network it manages.

Recommendation

Update the Ruijie RG-EW3000GX firmware to a non-vulnerable version as soon as possible. Until patched, restrict access to the administrative interface and disable remote management from untrusted networks.

Other vulnerabilities in Ruijie RG-EW3000GX

CVE-2026-92397Critical
A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380 within the cc_set function of the file unifyframe-sgi.elf in the configChange component. Manipulation of the data.url argument leads to OS command injection. The attack may be performed remotely, and the exploit has been publicly disclosed.

Original NVD description (English source)

A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.