📦 Ruckus Network Director

This vulnerability allows authenticated users to execute arbitrary operating system commands by injecting malicious input into an IP address field in RUCKUS SmartZone (SZ) network management software....

CVE-2025-44963 allows attackers to forge administrator JSON Web Tokens (JWTs) in RUCKUS Network Director (RND) by exploiting a hardcoded secret key. This enables authentication bypass and administrati...

CVE-2025-44960 is an OS command injection vulnerability in RUCKUS SmartZone (SZ) network management software. Attackers can execute arbitrary commands on the underlying operating system by manipulatin...

CVE-2025-44955 is a privilege escalation vulnerability in RUCKUS Network Director (RND) where jailed users can gain root access using a weak, hardcoded password. This affects organizations using RND f...

RUCKUS Network Director (RND) versions before 4.5 store passwords in a recoverable format instead of using secure hashing. This vulnerability allows attackers with access to the system to potentially ...