Ruijie vulnerabilities
We track 95 vulnerabilities in Ruijie products across 60+ products. 95 are rated high or critical, and none are known to be exploited. The most recent was published on November 1, 2026.
Latest Ruijie vulnerabilities
- 7.2 High severity
RG-UAC: Improper Neutralization of Special Elements used in an OS Command
A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240428. Affected is an unknown function of the file /view/dhcp/dhcpClient/dhcp_client_commit.php. The manipulation of the argument ifName leads to os command injection. It is possib
- 7.2 High severity
RG-UAC: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. This issue affects some unknown processing of the file /view/bugSolve/captureData/commit.php. The manipulation of the argument tcpDump leads to os command injection. The
- 7.2 High severity
RG-UAC: Improper Neutralization of Special Elements used in an OS Command
A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/gre_edit_commit.php. The manipulation of the argument name leads to os command in
- 9.8 Critical severity
rg-nbr700gw_firmware: Reliance on Cookies without Validation and Integrity Checking
Ruijie RG-NBR700GW 10.3(4b12) router lacks cookie verification when resetting the password, resulting in an administrator password reset vulnerability. An attacker can use this vulnerability to log in to the device and disrupt the business of the enterprise.
- 8.8 High severity
RG-EG350: Improper Neutralization of Special Elements used in an OS Command
A vulnerability, which was classified as critical, has been found in Ruijie RG-EG350 up to 20240318. Affected by this issue is the function vpnAction of the file /itbox_pi/vpn_quickset_service.php?a=set_vpn of the component HTTP POST Request Handler. The manip
- 8.8 High severity
RG-EG350: Improper Neutralization of Special Elements used in an OS Command
A vulnerability classified as critical was found in Ruijie RG-EG350 up to 20240318. Affected by this vulnerability is the function setAction of the file /itbox_pi/networksafe.php?a=set of the component HTTP POST Request Handler. The manipulation of the argumen
- 7.3 High severity
RG-NBS2009G-P: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Ruijie RG-NBS2009G-P up to 20240305. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /EXCU_SHELL. The manipulation of the argument Command1 leads to command injection. The at
- 9.8 Critical severity
Rg-ws6008 Firmware: Improper Neutralization of Special Elements used in an OS Command
Ruijie WS6008 v1.x v2.x AC_RGOS11.9(6)W3B2_G2C6-01_10221911 and WS6108 v1.x AC_RGOS11.9(6)W3B2_G2C6-01_10221911 was discovered to contain a command injection vulnerability via the function downFiles.
- 8.8 High severity
RG-EW1200G: Improper Authentication
A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/sys/login. The manipulation leads to improper authentication. The attack may be launched remotely
- 8.8 High severity
rg-ew_series_routers_and_repeaters: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.
- 8.8 High severity
RG-EW1200G: Improper Access Control
A vulnerability was found in Ruijie RG-EW1200G 1.0(1)B1P5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /api/sys/set_passwd of the component Administrator Password Handler. The manipulation leads to i
- 9.8 Critical severity
rg-ew1200: Improper Control of Generation of Code
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S1930 series switches SWITCH_3.0(1)B11P218, RG-EG series business VPN routers EG_3.0(1)B11P216, EAP and RAP series wireless
- 8.8 High severity
BCR810W: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown processing of the component Tracert Page. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has b
- 7.2 High severity
RG-BCR860: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Ruijie RG-BCR860 2.5.13 and classified as critical. This issue affects some unknown processing of the component Network Diagnostic Page. The manipulation leads to os command injection. The attack may be initiated remotely. The expl
- 9.8 Critical severity
RG-EW1200G: Improper Access Control
A vulnerability was found in Ruijie RG-EW1200G EW_3.0(1)B11P204. It has been declared as critical. This vulnerability affects unknown code of the file app.09df2a9e44ab48766f5f.js of the component Admin Password Handler. The manipulation leads to improper acces