BaselineWatch
58907 CVEs · 135 in KEV
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
CVEs known58,907 New, 24 h759 Changed, 24 h909 In KEV135 Public exploit1,594 Match watchlist0

Vulnerabilities

All My stack Known exploited Public exploit Critical (9+) Likely exploited (EPSS ≥ 50%) Changed, 24 h New, 24 h Sort: risk modified published CVSS EPSS
CVECVSSEPSSVendor, productDescriptionModified
CVE-2025-56093 8.8 high 3.0% ruijie, x30_pro_firmware, rg-ew300_pro_firmware, rg-eap602_firmware OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the setWisp in file /usr/lib/lua/luci/modules/wireless.lua. 14 Oct
CVE-2025-56108 8.8 high 3.0% ruijie, x30_pro_firmware, rg-eap602_firmware, rg-est350_firmware OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua. 14 Oct
CVE-2025-56083 8.8 high 2.0% ruijie, rg-yst250f_firmware, rg-est310_v2_firmware, reyee_os OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua. 14 Oct
CVE-2025-56084 8.8 high 2.0% ruijie, rg-yst250f_firmware, rg-est310_v2_firmware, reyee_os OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua. 14 Oct
CVE-2025-56099 8.8 high 2.0% ruijie, rg-yst250f_firmware, rg-est310_v2_firmware, reyee_os OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua. 14 Oct
CVE-2025-56113 8.8 high 2.0% ruijie, rg-yst250f_firmware, rg-est310_v2_firmware, reyee_os OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua. 14 Oct

6 of 6

Download these 6 as CSV · subscribe to this list.

EPSS scores: 2026-10-29. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.