CVE-2026-116235: falha crítica em Oray Pugongying X5 Pro
Oray Pugongying X5 Pro L2TP Authentication crlf injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
48Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 9.4epss 0.6%
A flaw has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is an unknown functionality of the component L2TP Authentication. This manipulation of the argument Username causes crlf injection. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
Produtos afetados
Oray · Pugongying X5 ProPoCs públicas encontradas — 1
cve_referenceapp.notion.com/p/Oray-Pgyer-X5-Pro-Router-7-6-1-Root-Code-Execution-via-L2TP-Username-Injection-3ea797159f158012be0af2ca84d1ee2bnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Oray Pugongying X5 Pro
No mesmo produto, das mais perigosas para as menos.
CVE-2026-120225CRITICALOray Pugongying X5 Pro openwrt_release config_restore_ex path traversalEPSS 0.7%CVE-2026-116234CRITICALOray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injectionEPSS 0.5%CVE-2026-116233CRITICALOray Pugongying X5 Pro Dnsmasq crlf injectionEPSS 0.5%CVE-2026-116232CRITICALOray Pugongying X5 Pro SNMP snmp_set crlf injectionEPSS 0.4%CVE-2026-116231CRITICALOray Pugongying X5 Pro Ser2net crlf injectionEPSS 0.4%CVE-2026-116236HIGHOray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted uploadEPSS 0.4%