CVE-2025-68459: Ruijie Networks Co., Ltd AP180-Ac v1.xx

High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days.

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service.

Affected products

• Ruijie Networks Co., Ltd AP180-Ac v1.xx: up to and including 11.9(4)B1P8
• Ruijie Networks Co., Ltd AP180-Ac v2.xx: up to and including 11.9(4)B1P8
• Ruijie Networks Co., Ltd AP180-Ac v3.xx: up to and including 11.9(4)B1P8
• Ruijie Networks Co., Ltd AP180-Pe v1.xx: up to and including 11.9(4)B1P8
• Ruijie Networks Co., Ltd AP180-Pe v2.xx: up to and including 11.9(4)B1P8
• Ruijie Networks Co., Ltd AP180-Pe v3.xx: up to and including 11.9(4)B1P8
• Ruijie Networks Co., Ltd AP180JA v1.xx: up to and including 11.9(4)B1P8
• Ruijie Networks Co., Ltd AP180JA v2.xx: up to and including 11.9(4)B1P8
• Ruijie Networks Co., Ltd AP180JP v1.xx: up to and including 11.9(4)B1P8

Published 2025-12-18. Last modified 2026-10-07.