CVE-2026-92397

CRITICALCVSS 9.1

Description

A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerability is the function cc_set of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Timeline

Published:September 16th, 2026 4:17 PM

Last modified:September 16th, 2026 8:17 PM

CVSS Scoring

CVSS v3: 9.1 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CVSS v2: 8.3

Weaknesses (CWE)

CWE-77 CWE-78

References & Reports

Advisories, patches, and third-party reports

https://github.com/FoundTL/RG-EW3000GX/blob/main/RG-EW3000GX_unifyframe-sgi.elf.md
https://vuldb.com/cve/CVE-2026-92397
https://vuldb.com/submit/940161
https://vuldb.com/vuln/405549
https://vuldb.com/vuln/405549/cti

Source: NIST NVD · Data may lag official sources by up to one minute