Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2862▼ 326 respecto a la semana anterior
Críticas / altas1389▼ 28 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)293▼ 216 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 2.6% | — | Ruijie Rg-ew1200g PRO FirmwareRuijie Rg-ew1300g Firmware | 11/12/2025 | 17/6/2026 | OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua. | |
| Analizada | Alta (8.8) | 2.8% | — | Ruijie Rg-ew1200g PRO FirmwareRuijie Rg-eap602 Firmware | 11/12/2025 | 17/6/2026 | OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua. | |
| Analizada | Alta (8.8) | 2.9% | — | Ruijie Rg-ew1200g PRO FirmwareRuijie Rg-ew1200r Firmware | 11/12/2025 | 17/6/2026 | OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua. | |
| Modificada | Alta (8.8) | 2.6% | — | Ruijie Rg-ew1200 FirmwareRuijie Rg-ew1200g PRO FirmwareRuijie Rg-ew1200r FirmwareRuijie Rg-ew1300g Firmware+92 | 17/8/2023 | 17/6/2026 | A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers… | |
| Modificada | Alta (8.8) | 2.3% | — | Ruijienetworks Rg-ew1800gx PRO FirmwareRuijienetworks Rg-ew3200gx PRO FirmwareRuijienetworks Rg-ew1200g PRO Firmware | 26/3/2023 | 17/6/2026 | RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW_3.0(1)B11P204 were discovered to contain multiple command injection vulnerabilities via the data.ip, data.protocal, data.iface and data.package parameters in the runPackDiagnose… | |
| Modificada | Crítica (9.8) | 1.0% | — | Ruijienetworks Rg-ew1200r FirmwareRuijienetworks Rg-ew1200 FirmwareRuijienetworks Rg-ew1200g PRO Firmware | 26/3/2023 | 17/6/2026 | Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function. |