What’s Vulnerable › Products

Oray Pugongying X5 Pro vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Oray Pugongying X5 Pro version is affected

Latest Oray Pugongying X5 Pro vulnerabilities

• CVE-2026-120225 — Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal (CVSS 9.1)
• CVE-2026-120224 — Oray Pugongying X5 Pro API Authorization run_async_task improper authorization (CVSS 9.9)
• CVE-2026-120223 — Oray Pugongying X5 Pro Session ID session.lua session_get random values (CVSS 3.1)
• CVE-2026-116235 — Oray Pugongying X5 Pro L2TP Authentication crlf injection (CVSS 9.1)
• CVE-2026-116234 — Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection (CVSS 9.1)
• CVE-2026-116237 — Oray Pugongying X5 Pro Dnsmasq crlf injection (CVSS 8.4)
• CVE-2026-116236 — Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload (CVSS 7.2)
• CVE-2026-116232 — Oray Pugongying X5 Pro SNMP snmp_set crlf injection (CVSS 9.9)
• CVE-2026-116231 — Oray Pugongying X5 Pro Ser2net crlf injection (CVSS 9.9)
• CVE-2026-116233 — Oray Pugongying X5 Pro Dnsmasq crlf injection (CVSS 9.1)