CVE-2026-92398: Ruijie RG-EW3000GX user_list_note admin os command injection
A vulnerability was found in Ruijie RG-EW3000GX EW3.0(1)B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ruijie RG-EW3000GXto a version that resolves this vulnerability.Fixed in EW_3.0(1)B11P380 - Compensating control
Because the issue enables remote os command injection via /etc/rg_config/admin (user_list_note Module), restrict access to the device/service that allows remote requests to this functionality (e.g., limit management/user-list endpoints to trusted sources via firewall/ACL).
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The attack is remote and requires high privileges. No user interaction is required.
Is public exploit code available?
Yes. The exploit has been made public and could be used.
Which version is identified as affected?
The reported affected version is Ruijie RG-EW3000GX EW_3.0(1)B11P380.