Vendor

    Oray

    11 known vulnerabilities in products by Oray, 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oray
    CriticalCVE-2026-120225

    Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal

    		9.1
    CriticalCVE-2026-116235

    Oray Pugongying X5 Pro L2TP Authentication crlf injection

    		9.1
    CriticalCVE-2026-116232

    Oray Pugongying X5 Pro SNMP snmp_set crlf injection

    		9.9
    CriticalCVE-2026-116231

    Oray Pugongying X5 Pro Ser2net crlf injection

    		9.9
    CriticalCVE-2026-116234

    Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection

    		9.1
    CriticalCVE-2026-116233

    Oray Pugongying X5 Pro Dnsmasq crlf injection

    		9.1
    CriticalCVE-2026-120224

    Oray Pugongying X5 Pro API Authorization run_async_task improper authorization

    		9.9
    CriticalCVE-2026-116237

    Oray Pugongying X5 Pro Dnsmasq crlf injection

    		8.4
    HighCVE-2026-116236

    Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload

    		7.2
    LowCVE-2026-120223

    Oray Pugongying X5 Pro Session ID session.lua session_get random values

    		3.1
    Not ratedCVE-2005-2382

    Oray Peanuthull: Privilege Escalation

    		—

    Products

    Products by Oray
    Pugongying X5 Pro100