Vulnerability Database

314,496

Total vulnerabilities in the database

CVE-2025-65363

Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, device disruption, and potential network pivoting via the command parameter to the web_action.do endpoint.

  • Published: Dec 8, 2025
  • Updated: Dec 9, 2025
  • CVE: CVE-2025-65363
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.2
  • AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
ruijie / rg-ap720-l_firmware 11.1.0 11.1\(9\)b1p21.x