Live › vulnerability › CVE-2026-120241
Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P switches on firmware ESW_1.0(1)B1P48 have a buffer overflow in httpupg.cgi, the local firmware upgrade interface. VulDB says it can be triggered remotely without authentication and that a proof-of-concept is public. Ruijie has not published an advisory or fix, and VulDB says the vendor did not respond.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-01 19:21 UTC. All times on this page are UTC.
Teams running the five listed Ruijie RG-ES switch models on firmware ESW_1.0(1)B1P48 are exposed if the web management interface can be reached by an attacker. VulDB reports no authentication is needed. Switches whose management interface is only reachable from an isolated management network are much less exposed. Other Ruijie models are not confirmed affected.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| RG-ES205GC | vendor | ESW_1.0(1)B1P48 | – |
| RG-ES206GC-P | vendor | ESW_1.0(1)B1P48 | – |
| RG-ES208GC | vendor | ESW_1.0(1)B1P48 | – |
| RG-ES210GC-LP | vendor | ESW_1.0(1)B1P48 | – |
| RG-ES210GS-P | vendor | ESW_1.0(1)B1P48 | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-120241")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.