Skip to content

CVE record · 1 source

CVE-2026-116235

CVSS 9.1

A flaw has been found in Oray Pugongying X5 Pro 7.6.1.

Vendor: Oray
Product: Pugongying X5 Pro
CVSS v3.1: 9.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS: 0.006 (p49)
Weakness: CWE-74, CWE-93

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

32

CVE NVD 5d ago

A flaw has been found in Oray Pugongying X5 Pro 7.6.1.

A flaw has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is an unknown functionality of the component L2TP Authentication. This manipulation of the argument Username causes crlf injection. The attack…

PoC public CVSS 9.1 CVE-2026-116235 Oray