CVE-2025-56113

An OS Command Injection vulnerability exists in the Ruijie RG-YST wireless bridge series (specifically models RG-YST EST and YSTAP_3.0(1)B11P280YST250F ) running versions V1.xxV2.xx . The root cause is the mishandling of a specially crafted POST request to the pwdmodify function located in the fi...