{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/rg-es206gc-p-esw_1.01b1p48/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-120241"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["RG-ES205GC (ESW_1.0(1)B1P48)","RG-ES206GC-P (ESW_1.0(1)B1P48)","RG-ES208GC (ESW_1.0(1)B1P48)","RG-ES210GC-LP (ESW_1.0(1)B1P48)","RG-ES210GS-P (ESW_1.0(1)B1P48)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Ruijie"],"content_html":"\u003cp\u003eA vulnerability exists in the httpupg.cgi file within the Local Firmware Upgrade Interface of Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP, and RG-ES210GS-P (version ESW_1.0(1)B1P48). The vulnerability allows for remote buffer overflow. Public exploit code is available. The vendor did not respond to disclosure.\u003c/p\u003e\n","date_modified":"2026-11-01T23:01:15Z","date_published":"2026-11-01T23:01:15Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ruijie-buffer-overflow/","summary":"A vulnerability in the Local Firmware Upgrade Interface of specific Ruijie switches allows for remote buffer overflow.","title":"Ruijie Managed Switches: Buffer overflow in firmware upgrade interface (CVE-2026-120241)","url":"https://feed.craftedsignal.io/briefs/2026-11-ruijie-buffer-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - RG-ES206GC-P (ESW_1.0(1)B1P48)","version":"https://jsonfeed.org/version/1.1"}