Product by Oray
Pugongying X5 Pro
10 known vulnerabilities in Pugongying X5 Pro (Oray), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-116235 | Oray Pugongying X5 Pro L2TP Authentication crlf injection | 9.1 | |
| Critical | CVE-2026-116231 | Oray Pugongying X5 Pro Ser2net crlf injection | 9.9 | |
| Critical | CVE-2026-116232 | Oray Pugongying X5 Pro SNMP snmp_set crlf injection | 9.9 | |
| Critical | CVE-2026-116233 | Oray Pugongying X5 Pro Dnsmasq crlf injection | 9.1 | |
| Critical | CVE-2026-116234 | Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection | 9.1 | |
| High | CVE-2026-116236 | Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload | 7.2 | |
| Critical | CVE-2026-120224 | Oray Pugongying X5 Pro API Authorization run_async_task improper authorization | 9.9 | |
| High | CVE-2026-116237 | Oray Pugongying X5 Pro Dnsmasq crlf injection | 8.4 | |
| Critical | CVE-2026-120225 | Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal | 9.1 | |
| Low | CVE-2026-120223 | Oray Pugongying X5 Pro Session ID session.lua session_get random values | 3.1 |