CVE-2026-120242 | Ruijie RG-ES205GC ESW_1.0(1)B1P48 Cloud Management set_cloud_serverUrl.cgi url cross site scripting

October 31, 2026 Yanac

A vulnerability labeled as problematic has been found in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. The affected element is an unknown function of the file set_cloud_serverUrl.cgi of the component Cloud Management. The manipulation of the argument url results in cross site scripting.

This vulnerability is known as CVE-2026-120242. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More