CVE-2026-92398

CRITICAL 9.1

Ruijie RG-EW3000GX user_list_note admin os command injection

CVSS Score

9.1

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

CWE	CWE-78 CWE-77
Vendor	ruijie
Product	rg-ew3000gx
Published	Sep 16, 2026

Stay Ahead of the Next One

Get instant alerts for ruijie rg-ew3000gx

Be the first to know when new critical vulnerabilities affecting ruijie rg-ew3000gx are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Ruijie / RG-EW3000GX

EW_3.0(1)B11P380

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/405550 vuldb.com: https://vuldb.com/vuln/405550/cti vuldb.com: https://vuldb.com/cve/CVE-2026-92398 vuldb.com: https://vuldb.com/submit/940182 github.com: https://github.com/FoundTL/RG-EW3000GX/blob/main/RG-EW3000GX_user_list_note.md

Credits

🔍 Legion_TL (VulDB User)