HIGH

CVE-2026-120241

Published 2026-11-01 CVSS v3.1

View on NVD View on MITRE Check if this affects your version

CVSS Score

7.5

Description

A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness Classification (CWE)

CWE-119 Memory Buffer Bounds Error

CWE-120 Classic Buffer Overflow

References

https://github.com/byseeker/Ruijie-RG-ES-Series-Switches_PreAuth_Boundary_Overflow_DoS https://vuldb.com/cve/CVE-2026-120241 https://vuldb.com/submit/1016041 https://vuldb.com/vuln/429600 https://vuldb.com/vuln/429600/cti

Primary Sources

Always verify findings against the primary CVE record before acting. Both sources below are public-domain and authoritative.

NVD — NIST Official CVE enrichment, CVSS, CPE

MITRE CVE Program Official CVE record of authority

Does this affect your version?

Use the CVE Detector to check if a specific product version is impacted by this vulnerability, along with 100+ other CVEs.

Open Detector

Back to CVE Dashboard Search Other CVEs

CVE data aggregated from the National Vulnerability Database (NVD, public domain) and enriched by dbcve.org.