CVE-2026-120241 | Ruijie RG-ES205GC ESW_1.0(1)B1P48 Local Firmware Upgrade Interface httpupg.cgi buffer overflow

October 31, 2026 Yanac

A vulnerability identified as critical has been detected in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation leads to buffer overflow.

This vulnerability is traded as CVE-2026-120241. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More