CVE-2025-56110

Name of the Vulnerable Software and Affected Versions Ruijie RG-BCR RG-BCR860 (affected versions not specified)

Description An OS Command Injection issue exists in Ruijie RG-BCR RG-BCR860. Attackers can execute arbitrary commands by sending a specially crafted POST request to the action deal update function located in the file /usr/lib/lua/luci/controller/api/rcmsAPI.lua. The request targets the action deal update API endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.