TI-2026-83614 CVE-2026-120225 · GHSA-3vm4-7j95-xvh6
Path traversal in Oray Pugongying X5 Pro config restore function
Priority HIGH 76
A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1.
Oray
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Oray records in CISA KEVNo Oray vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records
TI-2026-83612 CVE-2026-120224 · GHSA-6494-g389-mxj7
Improper authorization in Oray Pugongying X5 Pro API Authorization
Priority HIGH 76
A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1.
TI-2026-80298 CVE-2026-116235 · GHSA-7qf3-fxvm-8v87
CRLF injection in Oray Pugongying X5 Pro L2TP authentication
Priority HIGH 76
A flaw has been found in Oray Pugongying X5 Pro 7.6.1.
TI-2026-80285 CVE-2026-116234 · GHSA-m5vr-m4x4-w4g9
CRLF injection in Oray Pugongying X5 Pro IPsec policy handler
Priority HIGH 76
A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1.
TI-2026-80284 CVE-2026-116233 · GHSA-xq2m-vg83-g4j7
CRLF injection in Oray Pugongying X5 Pro Dnsmasq component
Priority HIGH 76
A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.1.
TI-2026-80281 CVE-2026-116232 · GHSA-f8f8-wpgm-w3w7
CRLF injection in Oray Pugongying X5 Pro SNMP snmp_set function
Priority HIGH 76
A weakness has been identified in Oray Pugongying X5 Pro 7.6.1.
TI-2026-80280 CVE-2026-116231 · GHSA-wf66-wf8x-2jx2
CRLF injection in Oray Pugongying X5 Pro Ser2net
Priority HIGH 76
A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1.
TI-2026-80304 CVE-2026-116237 · GHSA-63pm-cc87-mhwh
CRLF injection in Oray Pugongying X5 Pro Dnsmasq
Priority HIGH 75
A vulnerability was found in Oray Pugongying X5 Pro 7.6.1.
TI-2026-80302 CVE-2026-116236 · GHSA-w73f-j75q-h693
Unrestricted file upload in Oray Pugongying X5 Pro PPPoE WAN settings
Priority HIGH 72
A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1.
TI-2026-83611 CVE-2026-120223 · GHSA-hxp8-52j7-5275
Insufficiently random session IDs in Oray Pugongying X5 Pro
Priority MEDIUM 45
A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1.
TI-2005-02254 CVE-2005-2382 · GHSA-p6pw-53c7-vc6x
Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when…
Priority LOW 32
Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which allows local users to gain privileges by accessing the Help functionality.