# cve.now: Ruijie

The newest entries naming Ruijie as an affected vendor (up to 200), of 57 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-120242](https://cve.now/CVE-2026-120242.md): Ruijie RG-ES205GC Cloud Management set\_cloud\_serverUrl.cgi cross site scripting (CVSS 4.8)
- [CVE-2026-120241](https://cve.now/CVE-2026-120241.md): Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow (CVSS 8.7)
- [CVE-2026-92398](https://cve.now/CVE-2026-92398.md): Ruijie RG-EW3000GX user\_list\_note admin os command injection (CVSS 9.4)
- [CVE-2026-92397](https://cve.now/CVE-2026-92397.md): Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc\_set os command injection (CVSS 9.4)
- [CVE-2026-14736](https://cve.now/CVE-2026-14736.md): Ruijie RG-UAC user\_auth\_commit.php unrestricted upload (CVSS 6.9)
- [CVE-2026-12197](https://cve.now/CVE-2026-12197.md): Ruijie EG105G-P JSON-RPC Diagnose Endpoint diagnose nslookup command injection (CVSS 8.6)
- [CVE-2023-53881](https://cve.now/CVE-2023-53881.md): ReyeeOS 1.204.1614 Man-in-the-Middle Remote Code Execution via CWMP (CVSS 9.2)
- [CVE-2025-11141](https://cve.now/CVE-2025-11141.md): Ruijie NBR2100G-E branch\_passw.php listAction os command injection (CVSS 5.1)
- [CVE-2025-10774](https://cve.now/CVE-2025-10774.md): Ruijie 6000-E10 sub\_commit.php os command injection (CVSS 5.1)
- [CVE-2025-9424](https://cve.now/CVE-2025-9424.md): Ruijie WS7204-A branch\_import.php os command injection (CVSS 5.1)
- [CVE-2025-8763](https://cve.now/CVE-2025-8763.md): Ruijie EG306MG strongSwan strongswan.conf missing encryption (CVSS 6.3)
- [CVE-2025-34057](https://cve.now/CVE-2025-34057.md): Ruijie NBR Router Administrative Credential Disclosure (CVSS 8.7)
- [CVE-2024-47146](https://cve.now/CVE-2024-47146.md): Ruijie Reyee OS Resource Leak (CVSS 6.5)
- [CVE-2024-52324](https://cve.now/CVE-2024-52324.md): Ruijie Reyee OS Use of Inherently Dangerous Function (CVSS 9.8)
- [CVE-2024-48874](https://cve.now/CVE-2024-48874.md): Ruijie Reyee OS Server-Side Request Forgery (CVSS 9.8)
- [CVE-2024-46874](https://cve.now/CVE-2024-46874.md): Ruijie Reyee OS Improper Handling of Insufficient Permissions or Privileges (CVSS 8.1)
- [CVE-2024-47791](https://cve.now/CVE-2024-47791.md): Ruijie Reyee OS Improper Neutralization of Wildcards or Matching Symbols (CVSS 7.5)
- [CVE-2024-45722](https://cve.now/CVE-2024-45722.md): Ruijie Reyee OS Use of Weak Credentials (CVSS 7.5)
- [CVE-2024-47043](https://cve.now/CVE-2024-47043.md): Ruijie Reyee OS Insecure Storage of Sensitive Information (CVSS 7.5)
- [CVE-2024-51727](https://cve.now/CVE-2024-51727.md): Ruijie Reyee OS Premature Release of Resource During Expected Lifetime (CVSS 6.5)
- [CVE-2024-42494](https://cve.now/CVE-2024-42494.md): Ruijie Reyee OS Exposure of Private Personal Information to an Unauthorized Actor (CVSS 6.5)
- [CVE-2024-47547](https://cve.now/CVE-2024-47547.md): Ruijie Reyee OS Weak Password Recovery Mechanism for Forgotten Password (CVSS 9.4)
- [CVE-2024-8166](https://cve.now/CVE-2024-8166.md): Ruijie EG2000K index.php unrestricted upload (CVSS 5.1)
- [CVE-2024-6269](https://cve.now/CVE-2024-6269.md): Ruijie RG-UAC HTTP POST Request sxh\_vpnlic.php get\_ip.addr\_details command injection (CVSS 5.1)
- [CVE-2024-6187](https://cve.now/CVE-2024-6187.md): Ruijie RG-UAC sub\_commit.php os command injection (CVSS 5.3)
- [CVE-2024-6186](https://cve.now/CVE-2024-6186.md): Ruijie RG-UAC commit.php os command injection (CVSS 5.3)
- [CVE-2024-6185](https://cve.now/CVE-2024-6185.md): Ruijie RG-UAC commit.php get\_ip\_addr\_details os command injection (CVSS 5.3)
- [CVE-2024-6184](https://cve.now/CVE-2024-6184.md): Ruijie RG-UAC reboot\_commit.php os command injection (CVSS 5.3)
- [CVE-2024-5340](https://cve.now/CVE-2024-5340.md): Ruijie RG-UAC sub\_commit.php os command injection (CVSS 5.1)
- [CVE-2024-5339](https://cve.now/CVE-2024-5339.md): Ruijie RG-UAC online\_check.php os command injection (CVSS 5.1)
- [CVE-2024-5338](https://cve.now/CVE-2024-5338.md): Ruijie RG-UAC online.php os command injection (CVSS 5.1)
- [CVE-2024-5337](https://cve.now/CVE-2024-5337.md): Ruijie RG-UAC user\_commit.php os command injection (CVSS 5.1)
- [CVE-2024-5336](https://cve.now/CVE-2024-5336.md): Ruijie RG-UAC vlan\_add\_commit.php addVlan os command injection (CVSS 5.1)
- [CVE-2024-4816](https://cve.now/CVE-2024-4816.md): Ruijie RG-UAC gre\_add\_commit.php os command injection (CVSS 5.3)
- [CVE-2024-4815](https://cve.now/CVE-2024-4815.md): Ruijie RG-UAC detail.php os command injection (CVSS 5.3)
- [CVE-2024-4814](https://cve.now/CVE-2024-4814.md): Ruijie RG-UAC static\_route\_edit\_commit.php os command injection (CVSS 5.3)
- [CVE-2024-4813](https://cve.now/CVE-2024-4813.md): Ruijie RG-UAC interface\_commit.php os command injection (CVSS 5.3)
- [CVE-2024-4510](https://cve.now/CVE-2024-4510.md): Ruijie RG-UAC arp\_add\_commit.php os command injection (CVSS 4.7)
- [CVE-2024-4509](https://cve.now/CVE-2024-4509.md): Ruijie RG-UAC add\_commit.php os command injection (CVSS 4.7)
- [CVE-2024-4508](https://cve.now/CVE-2024-4508.md): Ruijie RG-UAC static\_route\_edit\_ipv6.php os command injection (CVSS 4.7)
- [CVE-2024-4507](https://cve.now/CVE-2024-4507.md): Ruijie RG-UAC static\_route\_add\_ipv6.php os command injection (CVSS 4.7)
- [CVE-2024-4506](https://cve.now/CVE-2024-4506.md): Ruijie RG-UAC ip\_addr\_edit\_commit.php os command injection (CVSS 4.7)
- [CVE-2024-4505](https://cve.now/CVE-2024-4505.md): Ruijie RG-UAC ip\_addr\_add\_commit.php os command injection (CVSS 4.7)
- [CVE-2024-4504](https://cve.now/CVE-2024-4504.md): Ruijie RG-UAC commit.php os command injection (CVSS 4.7)
- [CVE-2024-4503](https://cve.now/CVE-2024-4503.md): Ruijie RG-UAC dhcp\_relay\_commit.php os command injection (CVSS 4.7)
- [CVE-2024-4502](https://cve.now/CVE-2024-4502.md): Ruijie RG-UAC dhcp\_client\_commit.php os command injection (CVSS 4.7)
- [CVE-2024-4501](https://cve.now/CVE-2024-4501.md): Ruijie RG-UAC commit.php os command injection (CVSS 4.7)
- [CVE-2024-4255](https://cve.now/CVE-2024-4255.md): Ruijie RG-UAC gre\_edit\_commit.php os command injection (CVSS 4.7)
- [CVE-2024-2910](https://cve.now/CVE-2024-2910.md): Ruijie RG-EG350 HTTP POST Request vpnAction os command injection (CVSS 6.3)
- [CVE-2024-2909](https://cve.now/CVE-2024-2909.md): Ruijie RG-EG350 HTTP POST Request setAction os command injection (CVSS 8.8)
- [CVE-2024-2642](https://cve.now/CVE-2024-2642.md): Ruijie RG-NBS2009G-P EXCU\_SHELL command injection (CVSS 7.3)
- [CVE-2024-2641](https://cve.now/CVE-2024-2641.md): Ruijie RG-NBS2009G-P Password passwdManage.htm improper authorization (CVSS 5.3)
- [CVE-2023-4415](https://cve.now/CVE-2023-4415.md): Ruijie RG-EW1200G login improper authentication (CVSS 7.3)
- [CVE-2023-4169](https://cve.now/CVE-2023-4169.md): Ruijie RG-EW1200G Administrator Password set\_passwd access control (CVSS 6.3)
- [CVE-2023-3608](https://cve.now/CVE-2023-3608.md): Ruijie BCR810W Tracert Page os command injection (CVSS 4.7)
- [CVE-2023-3450](https://cve.now/CVE-2023-3450.md): Ruijie RG-BCR860 Network Diagnostic Page os command injection (CVSS 4.7)
- [CVE-2023-3306](https://cve.now/CVE-2023-3306.md): Ruijie RG-EW1200G Admin Password app.09df2a9e44ab48766f5f.js access control (CVSS 7.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ruijie
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.