CVE-2026-120242
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A security flaw was discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P devices (version ESW_1.0(1)B1P48) in an unknown function of set_cloud_serverUrl.cgi, part of the Cloud Management component. Manipulating the url argument results in cross-site scripting (XSS). The attack can be launched remotely and the exploit has been publicly released.
Risk Assessment
A remote attacker could inject a malicious script that executes in the administrator's browser, potentially leading to session or data theft. The public availability of the exploit increases the risk of exploitation.
Recommendation
Apply the vendor patch as soon as it becomes available and restrict access to the cloud management interface. Until then, validate input and monitor for suspicious requests.
Other vulnerabilities in Ruijie RG-ES205GC/ES206GC-P/ES208GC/ES210GC-LP/ES210GS-P
Original NVD description (English source)
A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. The affected element is an unknown function of the file set_cloud_serverUrl.cgi of the component Cloud Management. The manipulation of the argument url results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS