---
title: "Ruijie vulnerabilities: CVEs, CISA KEV and security advisories"
url: https://radicalnotion.ai/vendor/ruijie
type: vendor
description: "Ruijie has 136 published CVEs, 0 in CISA KEV and 97 with public exploits."
updated: 2026-11-01
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# Ruijie vulnerabilities

- **Published CVEs:** 136
- **In CISA KEV:** 0
- **With a public exploit:** 97
- **With a patch:** 28
- **Average CVSS:** 8.0
- **CVEs in the last two years:** 62
- **First CVE:** 2021-11-16
- **Latest CVE:** 2026-11-01

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 24 |
| High | 86 |
| Medium | 26 |
| Low | 0 |
| Unscored | 0 |

## Most affected products

| Product | CVEs |
| --- | --- |
| [RG-UAC](https://radicalnotion.ai/vendor/ruijie/rg-uac) | 28 |
| [rg-uac 6000-e50](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-e50) | 21 |
| [rg-uac 6000-e50 firmware](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-e50-firmware) | 21 |
| [rg-uac 6000-e10 firmware](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-e10-firmware) | 20 |
| [rg-uac 6000-e10c firmware](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-e10c-firmware) | 20 |
| [rg-uac 6000-e10c](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-e10c) | 20 |
| [rg-uac 6000-cc](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-cc) | 20 |
| [rg-uac 6000-cc firmware](https://radicalnotion.ai/vendor/ruijie/rg-uac-6000-cc-firmware) | 20 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-78](https://radicalnotion.ai/cwe/cwe-78) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | 78 |
| [CWE-77](https://radicalnotion.ai/cwe/cwe-77) | Improper Neutralization of Special Elements used in a Command ('Command Injection') | 13 |
| [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 3 |
| [CWE-94](https://radicalnotion.ai/cwe/cwe-94) | Improper Control of Generation of Code ('Code Injection') | 3 |
| [CWE-434](https://radicalnotion.ai/cwe/cwe-434) | Unrestricted Upload of File with Dangerous Type | 3 |
| [CWE-287](https://radicalnotion.ai/cwe/cwe-287) | Improper Authentication | 2 |
| [CWE-922](https://radicalnotion.ai/cwe/cwe-922) | Insecure Storage of Sensitive Information | 2 |
| [CWE-120](https://radicalnotion.ai/cwe/cwe-120) | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | 2 |

## Assigning CNAs

| CNA | CVEs |
| --- | --- |
| [mitre](https://radicalnotion.ai/cna/mitre) | 72 |
| [VulDB](https://radicalnotion.ai/cna/vuldb) | 45 |
| [icscert](https://radicalnotion.ai/cna/icscert) | 10 |
| [VulnCheck](https://radicalnotion.ai/cna/vulncheck) | 6 |
| [jpcert](https://radicalnotion.ai/cna/jpcert) | 3 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2021 | 2 |
| 2022 | 9 |
| 2023 | 11 |
| 2024 | 52 |
| 2025 | 54 |
| 2026 | 8 |

## Latest CVEs

| CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-120242 | Ruijie RG-ES205GC Cloud Management set\_cloud\_serverUrl.cgi cross site scripting | medium | 4.8 | 0.2% | No | 2026-11-01 |
| CVE-2026-120241 | Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow | high | 8.7 | 0.6% | No | 2026-11-01 |
| CVE-2026-92398 | Ruijie RG-EW3000GX user\_list\_note admin os command injection | critical | 9.4 | 3.2% | No | 2026-09-16 |
| CVE-2026-92397 | Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc\_set os command injection | critical | 9.4 | 3.2% | No | 2026-09-16 |
| CVE-2026-14736 | Ruijie RG-UAC user\_auth\_commit.php unrestricted upload | medium | 6.9 | 0.5% | No | 2026-07-05 |
| CVE-2026-12197 | Ruijie EG105G-P JSON-RPC Diagnose Endpoint diagnose nslookup command injection | high | 8.6 | 3.2% | No | 2026-06-14 |
| CVE-2020-37015 | Ruijie Networks Switch eWeb S29\_RGOS 11.4 - Directory Traversal | high | 7.1 | 0.7% | No | 2026-01-29 |
| CVE-2026-23699 | - | high | 8.6 | 1.6% | No | 2026-01-22 |
| CVE-2025-68459 | - | high | 8.6 | 1.4% | No | 2025-12-18 |
| CVE-2023-53881 | ReyeeOS 1.204.1614 Man-in-the-Middle Remote Code Execution via CWMP | critical | 9.2 | 0.3% | No | 2025-12-15 |
| CVE-2025-56130 | - | high | 8.8 | 2.1% | No | 2025-12-11 |
| CVE-2025-56077 | - | high | 8.8 | 2.8% | No | 2025-12-11 |

## Frequently asked questions

### How many CVEs does Ruijie have?

Ruijie has 136 published CVE records since 2021, including 62 in the last two years.

### How many Ruijie CVEs are in CISA KEV?

None of Ruijie's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Which Ruijie products have the most CVEs?

The Ruijie products with the most published CVEs are RG-UAC, rg-uac 6000-e50, rg-uac 6000-e50 firmware, rg-uac 6000-e10 firmware, rg-uac 6000-e10c firmware.

### What are the most common weakness types in Ruijie CVEs?

Ruijie's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-284 (Improper Access Control), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

### Are there public exploits for Ruijie vulnerabilities?

Yes — 97 of Ruijie's CVEs have a known public exploit.

### How many critical Ruijie vulnerabilities are there?

Ruijie has 24 critical and 86 high-severity CVEs.

### What is the average severity of Ruijie CVEs?

The average CVSS base score across Ruijie's scored CVEs is 8.0.

## Related vendors

- [Centreon](https://radicalnotion.ai/vendor/centreon) (137 CVEs)
- [Snipeitapp](https://radicalnotion.ai/vendor/snipeitapp) (137 CVEs)
- [Crocoblock](https://radicalnotion.ai/vendor/crocoblock) (136 CVEs)
- [Tanium](https://radicalnotion.ai/vendor/tanium) (136 CVEs)
- [Themeisle](https://radicalnotion.ai/vendor/themeisle) (136 CVEs)
- [WebKitGTK](https://radicalnotion.ai/vendor/webkitgtk) (135 CVEs)
- [Go standard library](https://radicalnotion.ai/vendor/gostandardlibrary) (135 CVEs)
- [vLLM](https://radicalnotion.ai/vendor/vllm) (135 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/ruijie). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.