Skip to content

CVE record · 1 source

CVE-2026-120224

CVSS 9.9

A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1.

Vendor: Oray
Product: Pugongying X5 Pro
CVSS v3.1: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-266, CWE-285

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

45

CVE NVD 2h ago

A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1.

A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_by_json/run_async_task of the component API Authorization. The manipulation results in improper authorization. The…

PoC public CVSS 9.9 CVE-2026-120224 Oray