CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-01
Ruijie RG-ES Series Switches set_cloud_serverUrl.cgi Remote Cross-Site Scripting (XSS) Vulnerability (CVE-2026-120242)
[Affected Scope] Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP, and RG-ES210GS-P switches running firmware ESW_1.0(1)B1P48
[Impact] High-privileged remote attackers can inject malicious scripts via the 'url' parameter in the Cloud Management component, potentially leading to session hijacking of other administrators
[Mitigation] Restrict access to the web management interface using ACLs and monitor administrative input parameters for anomalous script payloads