https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-65363.htmlhttps://patchthecve.com/cve/CVE-2025-65363.htmlSun, 18 Oct 2026 17:10:00 +0000HIGH 7.2: Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the web_action.do endpoint.https://patchthecve.com/cve/CVE-2025-56752.htmlhttps://patchthecve.com/cve/CVE-2025-56752.htmlWed, 17 Jun 2026 09:42:45 +0000CRITICAL 9.4: A vulnerability in the Ruijie RG-ES series switch firmware ESW_1.0(1)B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to /https://patchthecve.com/cve/CVE-2025-9424.htmlhttps://patchthecve.com/cve/CVE-2025-9424.htmlWed, 17 Jun 2026 10:08:56 +0000MEDIUM 4.7: A vulnerability was identified in Ruijie WS7204-A 2017.06.15. Affected by this vulnerability is an unknown functionality of the file /itbox_pi/branch_import.php?a=branch_list. Such manipulation of the argument province leads to os command injection. The attack can be executed remotely. The exploit ihttps://patchthecve.com/cve/CVE-2025-25527.htmlhttps://patchthecve.com/cve/CVE-2025-25527.htmlWed, 17 Jun 2026 09:00:53 +0000MEDIUM 5.1: Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration of source address NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary comhttps://patchthecve.com/cve/CVE-2024-42936.htmlhttps://patchthecve.com/cve/CVE-2024-42936.htmlWed, 17 Jun 2026 07:50:08 +0000CRITICAL 9.8: The mqlink.elf is service component in Ruijie RG-EW300N with firmware ReyeeOS 1.300.1422 is vulnerable to Remote Code Execution via a modified MQTT broker message.https://patchthecve.com/cve/CVE-2024-48783.htmlhttps://patchthecve.com/cve/CVE-2024-48783.htmlWed, 17 Jun 2026 07:58:47 +0000HIGH 7.5: An issue in Ruijie NBR3000D-E Gateway allows a remote attacker to obtain sensitive information via the /tool/shell/postgresql.conf component.https://patchthecve.com/cve/CVE-2024-8166.htmlhttps://patchthecve.com/cve/CVE-2024-8166.htmlWed, 17 Jun 2026 08:22:02 +0000MEDIUM 4.7: A vulnerability has been found in Ruijie EG2000K 11.1(6)B2 and classified as critical. This vulnerability affects unknown code of the file /tool/index.php?c=download&a=save. The manipulation of the argument content leads to unrestricted upload. The attack can be initiated remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2019-16641.htmlhttps://patchthecve.com/cve/CVE-2019-16641.htmlWed, 17 Jun 2026 02:22:28 +0000HIGH 8.4: An issue was found on the Ruijie EG-2000 series gateway. There is a buffer overflow in client.so. Consequently, an attacker can use login.php to login to any account, without providing its password. This affects EG-2000SE EG_RGOS 11.1(1)B1.https://patchthecve.com/cve/CVE-2019-16640.htmlhttps://patchthecve.com/cve/CVE-2019-16640.htmlWed, 17 Jun 2026 02:22:28 +0000HIGH 7.5: An issue was found in upload.php on the Ruijie EG-2000 series gateway. A parameter passed to the class UploadFile is mishandled (%00 and /var/./html are not checked), which can allow an attacker to upload any file to the gateway. This affects EG-2000SE EG_RGOS 11.9 B11P1.https://patchthecve.com/cve/CVE-2019-16639.htmlhttps://patchthecve.com/cve/CVE-2019-16639.htmlWed, 17 Jun 2026 02:22:28 +0000CRITICAL 9.8: An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker (who only has web interface access) to use TELNET commands and/or show admin passwords via the mode_url=exec&command= substring. This affects EG-2000SE EG_https://patchthecve.com/cve/CVE-2019-16638.htmlhttps://patchthecve.com/cve/CVE-2019-16638.htmlWed, 17 Jun 2026 02:22:27 +0000HIGH 7.5: An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EG_RGOS 11.1(1)B1.https://patchthecve.com/cve/CVE-2024-6269.htmlhttps://patchthecve.com/cve/CVE-2024-6269.htmlWed, 17 Jun 2026 08:17:40 +0000MEDIUM 4.7: A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects the function get_ip.addr_details of the file /view/vpn/autovpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument indevice leads to command injection. Thttps://patchthecve.com/cve/CVE-2024-6187.htmlhttps://patchthecve.com/cve/CVE-2024-6187.htmlWed, 17 Jun 2026 08:17:28 +0000MEDIUM 6.3: A vulnerability has been found in Ruijie RG-UAC 1.0 and classified as critical. This vulnerability affects unknown code of the file /view/vpn/autovpn/sub_commit.php. The manipulation of the argument key leads to os command injection. The attack can be initiated remotely. The exploit has been discloshttps://patchthecve.com/cve/CVE-2024-6186.htmlhttps://patchthecve.com/cve/CVE-2024-6186.htmlWed, 17 Jun 2026 08:17:27 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in Ruijie RG-UAC 1.0. This affects an unknown part of the file /view/userAuthentication/SSO/commit.php. The manipulation of the argument ad_log_name leads to os command injection. It is possible to initiate the attack remotely. The exploithttps://patchthecve.com/cve/CVE-2024-6185.htmlhttps://patchthecve.com/cve/CVE-2024-6185.htmlWed, 17 Jun 2026 08:17:27 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC 1.0. Affected by this issue is the function get_ip_addr_details of the file /view/dhcp/dhcpConfig/commit.php. The manipulation of the argument ethname leads to os command injection. The attack may be launched remotelyhttps://patchthecve.com/cve/CVE-2024-6184.htmlhttps://patchthecve.com/cve/CVE-2024-6184.htmlWed, 17 Jun 2026 08:17:27 +0000MEDIUM 6.3: A vulnerability classified as critical was found in Ruijie RG-UAC 1.0. Affected by this vulnerability is an unknown functionality of the file /view/systemConfig/reboot/reboot_commit.php. The manipulation of the argument servicename leads to os command injection. The attack can be launched remotely. https://patchthecve.com/cve/CVE-2023-30308.htmlhttps://patchthecve.com/cve/CVE-2023-30308.htmlWed, 17 Jun 2026 05:54:27 +0000MEDIUM 6.5: An issue discovered in Ruijie EG210G-P, Ruijie EG105G-V2, Ruijie NBR, and Ruijie EG105G routers allows attackers to hijack TCP sessions which could lead to a denial of service.https://patchthecve.com/cve/CVE-2024-5340.htmlhttps://patchthecve.com/cve/CVE-2024-5340.htmlWed, 17 Jun 2026 08:15:43 +0000MEDIUM 4.7: A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/vpn/autovpn/sub_commit.php. The manipulation of the argument key leads to os command injection. The attack may be launched remotely. The exhttps://patchthecve.com/cve/CVE-2024-5339.htmlhttps://patchthecve.com/cve/CVE-2024-5339.htmlWed, 17 Jun 2026 08:15:43 +0000MEDIUM 4.7: A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/vpn/autovpn/online_check.php. The manipulation of the argument peernode leads to os command injection. The attack can be launched https://patchthecve.com/cve/CVE-2024-5338.htmlhttps://patchthecve.com/cve/CVE-2024-5338.htmlWed, 17 Jun 2026 08:15:43 +0000MEDIUM 4.7: A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been classified as critical. Affected is an unknown function of the file /view/vpn/autovpn/online.php. The manipulation of the argument peernode leads to os command injection. It is possible to launch the attack remotely. The exploit https://patchthecve.com/cve/CVE-2024-5337.htmlhttps://patchthecve.com/cve/CVE-2024-5337.htmlWed, 17 Jun 2026 08:15:43 +0000MEDIUM 4.7: A vulnerability was found in Ruijie RG-UAC up to 20240516 and classified as critical. This issue affects some unknown processing of the file /view/systemConfig/sys_user/user_commit.php. The manipulation of the argument email2/user_name leads to os command injection. The attack may be initiated remothttps://patchthecve.com/cve/CVE-2024-5336.htmlhttps://patchthecve.com/cve/CVE-2024-5336.htmlWed, 17 Jun 2026 08:15:43 +0000MEDIUM 4.7: A vulnerability has been found in Ruijie RG-UAC up to 20240516 and classified as critical. This vulnerability affects the function addVlan of the file /view/networkConfig/vlan/vlan_add_commit.php. The manipulation of the argument phyport leads to os command injection. The attack can be initiated remhttps://patchthecve.com/cve/CVE-2024-4816.htmlhttps://patchthecve.com/cve/CVE-2024-4816.htmlWed, 17 Jun 2026 08:02:59 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240506. This affects an unknown part of the file /view/networkConfig/GRE/gre_add_commit.php. The manipulation of the argument name/remote/local/IP leads to os command injection. It is possible to initiate the attachttps://patchthecve.com/cve/CVE-2024-4815.htmlhttps://patchthecve.com/cve/CVE-2024-4815.htmlWed, 17 Jun 2026 08:02:59 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240506. Affected by this issue is some unknown functionality of the file /view/bugSolve/viewData/detail.php. The manipulation of the argument filename leads to os command injection. The attack may be launched https://patchthecve.com/cve/CVE-2024-4814.htmlhttps://patchthecve.com/cve/CVE-2024-4814.htmlWed, 17 Jun 2026 08:02:59 +0000MEDIUM 6.3: A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240506. Affected by this vulnerability is an unknown functionality of the file /view/networkConfig/RouteConfig/StaticRoute/static_route_edit_commit.php. The manipulation of the argument oldipmask/oldgateway leads to os commandhttps://patchthecve.com/cve/CVE-2024-4813.htmlhttps://patchthecve.com/cve/CVE-2024-4813.htmlWed, 17 Jun 2026 08:02:58 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240506. Affected is an unknown function of the file /view/networkConfig/physicalInterface/interface_commit.php. The manipulation of the argument name leads to os command injection. It is possible to launch the attack remohttps://patchthecve.com/cve/CVE-2024-4510.htmlhttps://patchthecve.com/cve/CVE-2024-4510.htmlWed, 17 Jun 2026 08:02:01 +0000MEDIUM 4.7: A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/networkConfig/ArpTable/arp_add_commit.php. The manipulation of the argument text_ip_addr/text_mac_addr leads to os command injection. The ahttps://patchthecve.com/cve/CVE-2024-4509.htmlhttps://patchthecve.com/cve/CVE-2024-4509.htmlWed, 17 Jun 2026 08:02:01 +0000MEDIUM 4.7: A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/IPV6/naborTable/add_commit.php. The manipulation of the argument ip_addr/mac_addr leads to os command injection. The attack can behttps://patchthecve.com/cve/CVE-2024-4508.htmlhttps://patchthecve.com/cve/CVE-2024-4508.htmlWed, 17 Jun 2026 08:02:01 +0000MEDIUM 4.7: A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been classified as critical. Affected is an unknown function of the file /view/IPV6/ipv6StaticRoute/static_route_edit_ipv6.php. The manipulation of the argument oldipmask/oldgateway/olddevname leads to os command injection. It is posshttps://patchthecve.com/cve/CVE-2024-4507.htmlhttps://patchthecve.com/cve/CVE-2024-4507.htmlWed, 17 Jun 2026 08:02:01 +0000MEDIUM 4.7: A vulnerability was found in Ruijie RG-UAC up to 20240428 and classified as critical. This issue affects some unknown processing of the file /view/IPV6/ipv6StaticRoute/static_route_add_ipv6.php. The manipulation of the argument text_prefixlen/text_gateway/devname leads to os command injection. The ahttps://patchthecve.com/cve/CVE-2024-4506.htmlhttps://patchthecve.com/cve/CVE-2024-4506.htmlWed, 17 Jun 2026 08:02:01 +0000MEDIUM 4.7: A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects unknown code of the file /view/IPV6/ipv6Addr/ip_addr_edit_commit.php. The manipulation of the argument text_ip_addr/orgprelen/orgname leads to os command injection. The attack can behttps://patchthecve.com/cve/CVE-2024-4505.htmlhttps://patchthecve.com/cve/CVE-2024-4505.htmlWed, 17 Jun 2026 08:02:01 +0000MEDIUM 4.7: A vulnerability, which was classified as critical, was found in Ruijie RG-UAC up to 20240428. This affects an unknown part of the file /view/IPV6/ipv6Addr/ip_addr_add_commit.php. The manipulation of the argument prelen/ethname leads to os command injection. It is possible to initiate the attack remohttps://patchthecve.com/cve/CVE-2024-4504.htmlhttps://patchthecve.com/cve/CVE-2024-4504.htmlWed, 17 Jun 2026 08:02:00 +0000MEDIUM 4.7: A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240428. Affected by this issue is some unknown functionality of the file /view/HAconfig/baseConfig/commit.php. The manipulation of the argument peer_ip/local_ip leads to os command injection. The attack may behttps://patchthecve.com/cve/CVE-2024-4503.htmlhttps://patchthecve.com/cve/CVE-2024-4503.htmlWed, 17 Jun 2026 08:02:00 +0000MEDIUM 4.7: A vulnerability classified as critical was found in Ruijie RG-UAC up to 20240428. Affected by this vulnerability is an unknown functionality of the file /view/dhcp/dhcpConfig/dhcp_relay_commit.php. The manipulation of the argument interface_from leads to os command injection. The attack can be launchttps://patchthecve.com/cve/CVE-2024-4502.htmlhttps://patchthecve.com/cve/CVE-2024-4502.htmlWed, 17 Jun 2026 08:02:00 +0000MEDIUM 4.7: A vulnerability classified as critical has been found in Ruijie RG-UAC up to 20240428. Affected is an unknown function of the file /view/dhcp/dhcpClient/dhcp_client_commit.php. The manipulation of the argument ifName leads to os command injection. It is possible to launch the attack remotely. The exhttps://patchthecve.com/cve/CVE-2024-4501.htmlhttps://patchthecve.com/cve/CVE-2024-4501.htmlWed, 17 Jun 2026 08:02:00 +0000MEDIUM 4.7: A vulnerability was found in Ruijie RG-UAC up to 20240428. It has been rated as critical. This issue affects some unknown processing of the file /view/bugSolve/captureData/commit.php. The manipulation of the argument tcpDump leads to os command injection. The attack may be initiated remotely. The exhttps://patchthecve.com/cve/CVE-2024-4255.htmlhttps://patchthecve.com/cve/CVE-2024-4255.htmlWed, 17 Jun 2026 08:01:32 +0000MEDIUM 4.7: A vulnerability, which was classified as critical, has been found in Ruijie RG-UAC up to 20240419. This issue affects some unknown processing of the file /view/network Config/GRE/gre_edit_commit.php. The manipulation of the argument name leads to os command injection. The attack may be initiated rem