CVE-2026-12197 is a command injection vulnerability affecting Ruijie EG105G-P version 2.340. The issue resides in the nslookup function of the /cgi-bin/luci/api/diagnose endpoint, which processes JSON-RPC requests. By manipulating the params.target argument, an attacker can execute arbitrary commands remotely. The vulnerability is remotely exploitable without user interaction and has a CVSS 4.0 base score of 8.6, indicating high severity. Although the exploit has been publicly released, there is no known vendor response or patch available at this time.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected device with high privileges, potentially leading to full system compromise. This can result in unauthorized control, data theft, or disruption of device functionality. The vulnerability is exploitable remotely without user interaction, increasing the risk of widespread attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider applying network-level protections such as restricting access to the affected endpoint, disabling the vulnerable service if possible, or isolating the device until an official patch is released.