CVE-2026-92398: Ruijie RG-EW3000GX user_list_note admin os command injection

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-16 · updated 2026-09-16
Weakness: CWE-77

Description

A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Affected products

Ruijie RG-EW3000GX: EW_3.0(1)B11P380

References

https://github.com/FoundTL/RG-EW3000GX/blob/main/RG-EW3000GX_user_list_note.md
https://vuldb.com/cve/CVE-2026-92398
https://vuldb.com/submit/940182
https://vuldb.com/vuln/405550
https://vuldb.com/vuln/405550/cti

Get alerted when CVE-2026-92398 or the next vulnerability affects your stack