Skip to content
OpenAdvisories
High · 7.2 CVE-2026-23699 EUVD-2026-4173GHSA-w3g9-vqjw-3qr3

AP180 series with firmware versions prior to AP_RGOS 11.9(4)B1P8 contains an OS command injection vulnerability. If this vulnerability is e…

Published Jan 22, 2026 · Updated Jan 22, 2026 · Assigned by jpcert

Vendor: Ruijie Product: AP180-AC V1.xx Product: AP180-AC V2.xx Product: AP180-AC V3.xx Product: AP180-PE V1.xx Product: AP180-PE V2.xx Product: AP180-PE V3.xx Product: AP180(JA) V1.xx Product: AP180(JA) V2.xx Product: AP180(JP) V1.xx

Description

AP180 series with firmware versions prior to AP_RGOS 11.9(4)B1P8 contains an OS command injection vulnerability. If this vulnerability is exploited, arbitrary commands may be executed on the devices.

Affected products

VendorProductAffectedFixed
Ruijie Networks AP180(JA) V1.xx prior to AP_RGOS 11.9(4)B1P8 —
Ruijie Networks AP180(JP) V1.xx prior to AP_RGOS 11.9(4)B1P8 —
Ruijie Networks AP180-AC V1.xx prior to AP_RGOS 11.9(4)B1P8 —
Ruijie Networks AP180-PE V1.xx prior to AP_RGOS 11.9(4)B1P8 —
Ruijie Networks AP180(JA) V2.xx prior to AP_RGOS 11.9(4)B1P8 —
Ruijie Networks AP180-AC V2.xx prior to AP_RGOS 11.9(4)B1P8 —
Ruijie Networks AP180-PE V2.xx prior to AP_RGOS 11.9(4)B1P8 —
Ruijie Networks AP180-AC V3.xx prior to AP_RGOS 11.9(4)B1P8 —
Ruijie Networks AP180-PE V3.xx prior to AP_RGOS 11.9(4)B1P8 —

References