{"id":"CVE-2026-92398","title":"A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380","summary":"A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module. Performing a manipulation of the argument Nam…","severity":"critical","cvss":9.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-77","CWE-78"],"vendor":"Ruijie","product":"RG-EW3000GX","affected":["RG-EW3000GX EW_3.0(1)B11P380"],"published":"2026-09-16","updated":"2026-09-16","sourceUpdated":"2026-09-16T18:17:19.550","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-92398","references":[{"url":"https://github.com/FoundTL/RG-EW3000GX/blob/main/RG-EW3000GX_user_list_note.md","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-92398","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/940182","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/405550","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/405550/cti","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-16T17:31:21.539694Z"},"ingestedAt":"2026-09-16T16:59:56.623Z","epss":0.02469,"epssPercentile":0.8368,"slug":"CVE-2026-92398","body":"## Overview\n\nA vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rg_config/admin of the component user_list_note Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":63,"depthScoreParts":{"impact":50.1,"likelihood":0.5,"exploitation":12,"ransomware":0},"changes":[{"seq":205640,"id":"CVE-2026-92398","ts":1789581734460,"field":"exploit_available","old":"false","new":"true"}]}