Buffer Overflow Vulnerability in Ruijie RG-ES Series Switches
CVE-2026-120241

8.7HIGH

Key Information:

Vendor: Ruijie
Status: Rg-es205gc; Rg-es206gc-p; Rg-es208gc; Rg-es210gc-lp
Vendor: CVE Published:; 1 November 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-120241?

A vulnerability has been detected in specific models of Ruijie RG-ES series switches, notably affecting the Local Firmware Upgrade Interface via the httpupg.cgi file. This issue can lead to a buffer overflow, allowing attackers to execute remote exploits. The vulnerability is already publicly known, and security professionals are advised to assess their systems promptly. Despite early notifications to the vendor, there has been no response to address this security risk.

Affected Version(s)

RG-ES205GC ESW_1.0(1)B1P48

RG-ES206GC-P ESW_1.0(1)B1P48

RG-ES208GC ESW_1.0(1)B1P48

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-120241 - Proof of Concept