CVE-2026-92397

CRITICAL 9.1

Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection

CVSS Score

9.1

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerability is the function cc_set of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

CWE	CWE-78 CWE-77
Vendor	ruijie
Product	rg-ew3000gx
Published	Sep 16, 2026

Stay Ahead of the Next One

Get instant alerts for ruijie rg-ew3000gx

Be the first to know when new critical vulnerabilities affecting ruijie rg-ew3000gx are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Ruijie / RG-EW3000GX

EW_3.0(1)B11P380

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/405549 vuldb.com: https://vuldb.com/vuln/405549/cti vuldb.com: https://vuldb.com/cve/CVE-2026-92397 vuldb.com: https://vuldb.com/submit/940161 github.com: https://github.com/FoundTL/RG-EW3000GX/blob/main/RG-EW3000GX_unifyframe-sgi.elf.md

Credits

🔍 Legion_TL (VulDB User)