Vulnerability details
CVE-2026-116235
Oray Pugongying X5 Pro
Oray Pugongying X5 Pro L2TP Authentication crlf injection
CVSS 4.0
9.4Critical
Official description
A flaw has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is an unknown functionality of the component L2TP Authentication. This manipulation of the argument Username causes crlf injection. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.4Critical | 4.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P |
| 9.1Critical | 3.1 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R |
| 9.1Critical | 3.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R |
| 8.3High | 2.0 | CVEProject cvelistV5 (CNA) (VulDB) | AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Oray | Pugongying X5 Pro | 7.6.1 | CVEProject cvelistV5 (CNA) |
References and advisories
5- https://vuldb.com/vuln/426284 vdb-entrytechnical-description
- https://vuldb.com/vuln/426284/cti signaturepermissions-required
- https://vuldb.com/cve/CVE-2026-116235 third-party-advisory
- https://vuldb.com/submit/1005083 third-party-advisory
- https://app.notion.com/p/Oray-Pgyer-X5-Pro-Router-7-6-1-Root-Code-Execution-via-L2TP-Username-Injection-3ea797159f158012be0af2ca84d1ee2b exploit
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-10-26
- Last updated
- 2026-10-26
- State
- Published
- Assigner (CNA)
- VulDB
- Kolun priority
- 37 · Medium
Exploit prediction (EPSS)
0.61%
Probability of exploitation in 30 days
49.6%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Proof of concept
- Technical impact
- Total
Weaknesses (CWE)
- CWE-93CRLF Injection
- CWE-74Injection