Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality.
CVSS 4.0CRITICAL 9.2·Network·No auth·No interaction·EPSS 0.0062·Published 2025-11-07·Fixed in 11.9(4)B12P1CWE-94