Ruijie Rg-EW3000GX vulnerabilities

2 CVEs affecting Ruijie Rg-EW3000GX, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-92398, published 2026-09-16.

More from Ruijie.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-92398, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 3.2% chance of exploitation in the next 30 days. A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module.…
• CVE-2026-92397, published 2026-09-16. Critical severity, CVSS 9.1. EPSS: 3.2% chance of exploitation in the next 30 days. A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerability is the function cc_set of the file unifyframe-sgi.elf of the component configChange. Such…