ZeroDay Findings
Sign inSign up

Findings

CVE-2025-56102

OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the m…

Published Dec 11, 2025 · updated Oct 14, 2026 · ruijie rg-ew1800gx firmware

OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 11, 2025 · NIST NVD

    Detected

    OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

  2. Oct 14, 2026 · NIST NVD

    Updated

    OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

Affected

  • cpe ruijie/rg-ew1800gx firmware3.0\(1\)b11p226
  • cpe ruijie/rg-ew300r firmware3.0\(1\)b11p301

Sources

  • CVE.orgCVE-2025-56102

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2025-56102

    OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.

    nvd.nist.gov

References