NIST NVD · CVE-2026-116231

CVE-2026-116231: Kritische Schwachstelle in Oray Pugongying X5 Pro (3 CVEs)

In Oray Pugongying X5 Pro gibt es 3 Schwachstellen. Mögliche Folgen: Datenmanipulation und Informationsabfluss durch einen entfernten, authentisierten Angreifer. Der CVSS-Basiswert liegt bei 9,9 von 10.

Quelle

NIST NVD

Risiko

kritisch · 9,9 CVSS 3.1

Veröffentlicht

26. Oktober 2026, 10:16 Uhr

Art

Schwachstelle

Auswirkung

Datenmanipulation und Informationsabfluss

Angreifer

Entfernt, mit Anmeldung

Betroffene Produkte

• Oray Pugongying X5 Pro

CVE-Nummern

• CVE-2026-116231

  A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1. The impacted element is an unknown function of the component Ser2net. Performing a manipulation of the argument regmsg results in crlf injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

• CVE-2026-116233

  A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.1. This impacts an unknown function of the component Dnsmasq. The manipulation of the argument rent_time leads to crlf injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CVE-2026-116234

  A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the file /etc/ipsec.conf of the component IPsec Policy Handler. The manipulation of the argument secproto results in crlf injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Was tun?

Prüft, ob das Produkt im Einsatz ist, und haltet Ausschau nach einem Update des Herstellers. Bis dahin hilft es, das System nicht direkt aus dem Internet erreichbar zu machen.

Eintrag in der NVD öffnen ↗Im Lagebild ansehen

Automatisch erstellte Zusammenfassung ohne Gewähr. Maßgeblich ist die verlinkte Originalquelle.