Ruijie
- Total products in the ecosystem
- 16
- Total vulnerabilities (90 days)
- 3
en
Verify to analyze this security profile
As of 09/19/2026, Ruijie recorded 3 security vulnerabilities in the last 90 days across 2 products, including 2 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, RG-EW3000GX had the most security vulnerabilities in the Ruijie ecosystem, with 2 vulnerabilities—approximately 66.67% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-92398Ruijie RG-EW3000GX user_list_note admin os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-EW3000GX | Published09/16/2026 | SeverityCritical |
CVE-2026-92397Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-EW3000GX | Published09/16/2026 | SeverityCritical |
CVE-2026-14736Ruijie RG-UAC user_auth_commit.php unrestricted upload | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-UAC | Published07/05/2026 | SeverityMedium |
CVE-2026-12197Ruijie EG105G-P JSON-RPC Diagnose Endpoint diagnose nslookup command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productEG105G-P | Published06/14/2026 | SeverityHigh |
CVE-2023-53881ReyeeOS 1.204.1614 Man-in-the-Middle Remote Code Execution via CWMP | Exploitation statusPublic exploit | FixNot confirmed | Affected productReyeeOS | Published12/15/2025 | SeverityCritical |
CVE-2025-11141Ruijie NBR2100G-E branch_passw.php listAction os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productNBR2100G-E | Published09/29/2025 | SeverityMedium |
CVE-2025-10774Ruijie 6000-E10 sub_commit.php os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected product6000-E10 | Published09/22/2025 | SeverityMedium |
CVE-2025-9424Ruijie WS7204-A branch_import.php os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productWS7204-A | Published08/25/2025 | SeverityMedium |
CVE-2025-8763Ruijie EG306MG strongSwan strongswan.conf missing encryption | Exploitation statusNot known exploited | FixNot confirmed | Affected productEG306MG | Published08/09/2025 | SeverityMedium |
CVE-2025-34057Ruijie NBR Router Administrative Credential Disclosure | Exploitation statusPublic exploit | FixNot confirmed | Affected productNBR Router | Published07/02/2025 | SeverityHigh |
CVE-2024-47146Ruijie Reyee OS Resource Leak | Exploitation statusNot known exploited | FixYes | Affected productReyee OS | Published12/06/2024 | SeverityHigh |
CVE-2024-52324Ruijie Reyee OS Use of Inherently Dangerous Function | Exploitation statusNot known exploited | FixYes | Affected productReyee OS | Published12/06/2024 | SeverityCritical |
CVE-2024-48874Ruijie Reyee OS Server-Side Request Forgery | Exploitation statusNot known exploited | FixYes | Affected productReyee OS | Published12/06/2024 | SeverityCritical |
CVE-2024-46874Ruijie Reyee OS Improper Handling of Insufficient Permissions or Privileges | Exploitation statusNot known exploited | FixYes | Affected productReyee OS | Published12/06/2024 | SeverityCritical |
CVE-2024-47791Ruijie Reyee OS Improper Neutralization of Wildcards or Matching Symbols | Exploitation statusNot known exploited | FixYes | Affected productReyee OS | Published12/06/2024 | SeverityHigh |
CVE-2024-45722Ruijie Reyee OS Use of Weak Credentials | Exploitation statusNot known exploited | FixYes | Affected productReyee OS | Published12/06/2024 | SeverityHigh |
CVE-2024-47043Ruijie Reyee OS Insecure Storage of Sensitive Information | Exploitation statusNot known exploited | FixYes | Affected productReyee OS | Published12/06/2024 | SeverityHigh |
CVE-2024-51727Ruijie Reyee OS Premature Release of Resource During Expected Lifetime | Exploitation statusNot known exploited | FixYes | Affected productReyee OS | Published12/06/2024 | SeverityHigh |
CVE-2024-42494Ruijie Reyee OS Exposure of Private Personal Information to an Unauthorized Actor | Exploitation statusNot known exploited | FixYes | Affected productReyee OS | Published12/06/2024 | SeverityHigh |
CVE-2024-47547Ruijie Reyee OS Weak Password Recovery Mechanism for Forgotten Password | Exploitation statusNot known exploited | FixYes | Affected productReyee OS | Published12/06/2024 | SeverityCritical |
CVE-2024-8166Ruijie EG2000K index.php unrestricted upload | Exploitation statusPublic exploit | FixNot confirmed | Affected productEG2000K | Published08/26/2024 | SeverityMedium |
CVE-2024-6269Ruijie RG-UAC HTTP POST Request sxh_vpnlic.php get_ip.addr_details command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-UAC | Published06/23/2024 | SeverityMedium |
CVE-2024-6187Ruijie RG-UAC sub_commit.php os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-UAC | Published06/20/2024 | SeverityMedium |
CVE-2024-6186Ruijie RG-UAC commit.php os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-UAC | Published06/20/2024 | SeverityMedium |
CVE-2024-6185Ruijie RG-UAC commit.php get_ip_addr_details os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-UAC | Published06/20/2024 | SeverityMedium |
CVE-2024-6184Ruijie RG-UAC reboot_commit.php os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-UAC | Published06/20/2024 | SeverityMedium |
CVE-2024-5340Ruijie RG-UAC sub_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/25/2024 | SeverityMedium |
CVE-2024-5339Ruijie RG-UAC online_check.php os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-UAC | Published05/25/2024 | SeverityMedium |
CVE-2024-5338Ruijie RG-UAC online.php os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-UAC | Published05/25/2024 | SeverityMedium |
CVE-2024-5337Ruijie RG-UAC user_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/25/2024 | SeverityMedium |
CVE-2024-5336Ruijie RG-UAC vlan_add_commit.php addVlan os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/25/2024 | SeverityMedium |
CVE-2024-4816Ruijie RG-UAC gre_add_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/13/2024 | SeverityMedium |
CVE-2024-4815Ruijie RG-UAC detail.php os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-UAC | Published05/13/2024 | SeverityMedium |
CVE-2024-4814Ruijie RG-UAC static_route_edit_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/13/2024 | SeverityMedium |
CVE-2024-4813Ruijie RG-UAC interface_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/13/2024 | SeverityMedium |
CVE-2024-4510Ruijie RG-UAC arp_add_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/06/2024 | SeverityMedium |
CVE-2024-4509Ruijie RG-UAC add_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/06/2024 | SeverityMedium |
CVE-2024-4508Ruijie RG-UAC static_route_edit_ipv6.php os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-UAC | Published05/06/2024 | SeverityMedium |
CVE-2024-4507Ruijie RG-UAC static_route_add_ipv6.php os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-UAC | Published05/05/2024 | SeverityMedium |
CVE-2024-4506Ruijie RG-UAC ip_addr_edit_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/05/2024 | SeverityMedium |
CVE-2024-4505Ruijie RG-UAC ip_addr_add_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/05/2024 | SeverityMedium |
CVE-2024-4504Ruijie RG-UAC commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/05/2024 | SeverityMedium |
CVE-2024-4503Ruijie RG-UAC dhcp_relay_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/05/2024 | SeverityMedium |
CVE-2024-4502Ruijie RG-UAC dhcp_client_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/05/2024 | SeverityMedium |
CVE-2024-4501Ruijie RG-UAC commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published05/05/2024 | SeverityMedium |
CVE-2024-4255Ruijie RG-UAC gre_edit_commit.php os command injection | Exploitation statusPublic exploit | FixYes | Affected productRG-UAC | Published04/27/2024 | SeverityMedium |
CVE-2024-2910Ruijie RG-EG350 HTTP POST Request vpnAction os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-EG350 | Published03/26/2024 | SeverityMedium |
CVE-2024-2909Ruijie RG-EG350 HTTP POST Request setAction os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-EG350 | Published03/26/2024 | SeverityHigh |
CVE-2024-2642Ruijie RG-NBS2009G-P EXCU_SHELL command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-NBS2009G-P | Published03/19/2024 | SeverityHigh |
CVE-2024-2641Ruijie RG-NBS2009G-P Password passwdManage.htm improper authorization | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-NBS2009G-P | Published03/19/2024 | SeverityMedium |
CVE-2023-4415Ruijie RG-EW1200G login improper authentication | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-EW1200G | Published08/18/2023 | SeverityHigh |
CVE-2023-4169Ruijie RG-EW1200G Administrator Password set_passwd access control | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-EW1200G | Published08/05/2023 | SeverityMedium |
CVE-2023-3608Ruijie BCR810W Tracert Page os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productBCR810W | Published07/10/2023 | SeverityMedium |
CVE-2023-3450Ruijie RG-BCR860 Network Diagnostic Page os command injection | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-BCR860 | Published06/28/2023 | SeverityMedium |
CVE-2023-3306Ruijie RG-EW1200G Admin Password app.09df2a9e44ab48766f5f.js access control | Exploitation statusPublic exploit | FixNot confirmed | Affected productRG-EW1200G | Published06/18/2023 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan