CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-01
Ruijie RG-ES Series Switches httpupg.cgi Buffer Overflow Vulnerability (CVE-2026-120241)
[Affected Scope] Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP, and RG-ES210GS-P switches running firmware ESW_1.0(1)B1P48
[Impact] Unauthenticated remote attackers can trigger a buffer overflow via the local firmware upgrade interface (httpupg.cgi), leading to a complete Denial of Service (DoS)
[Mitigation] Restrict access to the switch's web management interface using Access Control Lists (ACLs) and isolate management traffic to a dedicated Out-of-Band (OOB) network