Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior
Críticas / altas1415▲ 65 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 2.7% | — | Ruijie X30 PRO FirmwareRuijie Rg-eap602 FirmwareRuijie Rg-est350 FirmwareRuijie Rg-ew300 PRO Firmware+1 | 11/12/2025 | 17/6/2026 | OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua. | |
| Analizada | Alta (8.8) | 2.6% | — | Ruijie X30 PRO FirmwareRuijie Rg-ew300 PRO Firmware | 11/12/2025 | 17/6/2026 | OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua. | |
| Analizada | Alta (8.8) | 3.3% | — | Ruijie X30 PRO FirmwareRuijie Rg-ew300 PRO Firmware | 11/12/2025 | 17/6/2026 | OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/host_access_delay.lua. | |
| Analizada | Alta (8.8) | 3.2% | — | Ruijie X30 PRO FirmwareRuijie Rg-ew300 PRO FirmwareRuijie Rg-eap602 Firmware | 11/12/2025 | 17/6/2026 | OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the setWisp in file /usr/lib/lua/luci/modules/wireless.lua. | |
| Analizada | Alta (8.8) | 2.9% | — | Ruijie Rg-ew1200 FirmwareRuijie Rg-ew300 PRO Firmware | 11/12/2025 | 17/6/2026 | OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua. | |
| Modificada | Alta (8.8) | 2.6% | — | Ruijie Rg-ew1200 FirmwareRuijie Rg-ew1200g PRO FirmwareRuijie Rg-ew1200r FirmwareRuijie Rg-ew1300g Firmware+92 | 17/8/2023 | 17/6/2026 | A command injection vulnerability in RG-EW series home routers and repeaters v.EW_3.0(1)B11P219, RG-NBS and RG-S1930 series switches v.SWITCH_3.0(1)B11P219, RG-EG series business VPN routers v.EG_3.0(1)B11P219, EAP and RAP series wireless access points v.AP_3.0(1)B11P219, and NBC series wireless controllers… |