Oray vulnerabilities

Newest CVEs

• CVE-2026-120225

  Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal

  Oray · Pugongying X5 Pro

  Critical9.4
• CVE-2026-120224

  Oray Pugongying X5 Pro API Authorization run_async_task improper authorization

  Oray · Pugongying X5 Pro

  Critical9.4
• CVE-2026-120223

  Oray Pugongying X5 Pro Session ID session.lua session_get random values

  Oray · Pugongying X5 Pro

  Low2.3
• CVE-2026-116237

  Oray Pugongying X5 Pro Dnsmasq crlf injection

  Oray · Pugongying X5 Pro

  Critical9.3
• CVE-2026-116236

  Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload

  Oray · Pugongying X5 Pro

  High8.6
• CVE-2026-116235

  Oray Pugongying X5 Pro L2TP Authentication crlf injection

  Oray · Pugongying X5 Pro

  Critical9.4
• CVE-2026-116234

  Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection

  Oray · Pugongying X5 Pro

  Critical9.4
• CVE-2026-116233

  Oray Pugongying X5 Pro Dnsmasq crlf injection

  Oray · Pugongying X5 Pro

  Critical9.4
• CVE-2026-116232

  Oray Pugongying X5 Pro SNMP snmp_set crlf injection

  Oray · Pugongying X5 Pro

  Critical9.4
• CVE-2026-116231

  Oray Pugongying X5 Pro Ser2net crlf injection

  Oray · Pugongying X5 Pro

  Critical9.4