CVE-2023-26800: Ruijienetworks Rg-EW1200 Firmware

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function.

Affected products

• Ruijienetworks Rg-EW1200 Firmware: version ew_3.0(1)b11p204 only
• Ruijienetworks Rg-EW1200G Pro Firmware: version ew_3.0(1)b11p204 only
• Ruijienetworks Rg-EW1200R Firmware: version ew_3.0(1)b11p204 only

Published 2023-03-26. Last modified 2026-06-17.