What’s Vulnerable › Vulnerabilities
CVE-2025-65363
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 6.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-12-08 · updated 2026-10-18
- Weakness: CWE-77
Description
Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the web_action.do endpoint.
Affected products
- Ruijie Rg-Ap720-L Firmware: from 11.1.0 through 11.1\(9\)B1P21
References
Get alerted when CVE-2025-65363 or the next vulnerability affects your stack