---
id: CVE-2026-120241
title: Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow
summary: >-
  A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC,
  RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown
  function of the file httpupg.cgi of the component Local Firmware Upgrade
  Interface. The…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R'
cvssSource: cna
cwe:
  - CWE-120
  - CWE-119
vendor: Ruijie
product: RG-ES205GC
affected:
  - RG-ES205GC ESW_1.0(1)B1P48
  - RG-ES206GC-P ESW_1.0(1)B1P48
  - RG-ES208GC ESW_1.0(1)B1P48
  - RG-ES210GC-LP ESW_1.0(1)B1P48
  - RG-ES210GS-P ESW_1.0(1)B1P48
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-11-05T15:48:56.370678Z'
exploitAvailable: true
published: '2026-11-01'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T15:49:16.545Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-120241'
references:
  - url: 'https://vuldb.com/vuln/429600'
    label: >-
      VDB-429600 | Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer
      overflow
  - url: 'https://vuldb.com/vuln/429600/cti'
    label: 'VDB-429600 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-120241'
    label: CVE-2026-120241 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1016041'
    label: >-
      Submit #1016041 | Ruijie Networks Co., Ltd. RG-ES205GC, RG-ES206GC-P,
      RG-ES208GC, RG-ES210GC-LP, RG-ES210GS-P (sharing the same ESW firmware;
      NIS2100 series may also be aff ESW_1.0(1)B1P48, Release(12211919) Buffer
      Overflow
  - url: >-
      https://github.com/byseeker/Ruijie-RG-ES-Series-Switches_PreAuth_Boundary_Overflow_DoS
tags:
  - cve.org
  - exploit-available
epss: 0.00619
epssPercentile: 0.49778
ingestedAt: '2026-11-05T21:36:00.923Z'
---

## Overview

A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P ESW_1.0(1)B1P48. Impacted is an unknown function of the file httpupg.cgi of the component Local Firmware Upgrade Interface. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `RG-ES205GC ESW_1.0(1)B1P48`
- `RG-ES206GC-P ESW_1.0(1)B1P48`
- `RG-ES208GC ESW_1.0(1)B1P48`
- `RG-ES210GC-LP ESW_1.0(1)B1P48`
- `RG-ES210GS-P ESW_1.0(1)B1P48`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.