What’s Vulnerable › Vulnerabilities
CVE-2026-116231: Oray Pugongying X5 Pro Ser2net crlf injection
- Severity: critical (CVSS 9.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-26 · updated 2026-10-26
- Weakness: CWE-74
Description
A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1. The impacted element is an unknown function of the component Ser2net. Performing a manipulation of the argument regmsg results in crlf injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Summary
A CRLF injection flaw exists in the Ser2net component of Oray Pugongying X5 Pro 7.6.1, triggered by manipulating the regmsg argument. It can be exploited remotely and has a critical CVSS score of 9.9, potentially allowing attackers to inject malicious content or manipulate protocol responses. A public exploit has been released, though the vendor did not respond to the disclosure. Users should update to a fixed firmware version if available, or restrict network access to the Ser2net interface as a mitigation.
توجد ثغرة حقن CRLF في مكوّن Ser2net في Oray Pugongying X5 Pro 7.6.1، تُستثار عبر التلاعب بالوسيط regmsg. يمكن استغلالها عن بُعد، وقد بلغت درجة CVSS الحرجة 9.9، مما قد يسمح للمهاجمين بحقن محتوى ضار أو التلاعب باستجابات البروتوكول. تم نشر استغلال علني للثغرة، ولم تستجب الشركة المصنّعة للإفصاح. يُنصح المستخدمون بالترقية إلى إصدار برنامج ثابت إن توفّر، أو تقييد الوصول الشبكي إلى واجهة Ser2net كإجراء تخفيفي.
Affected products
- Oray Pugongying X5 Pro: 7.6.1
References
- https://app.notion.com/p/Oray-Pgyer-X5-Pro-Router-7-6-1-A-Serial-Banner-Newline-Lets-ser2net-Overwrite-Existing-Files-3ea797159f158019b687eadcc7d6a85b
- https://vuldb.com/cve/CVE-2026-116231
- https://vuldb.com/submit/1005078
- https://vuldb.com/vuln/426280
- https://vuldb.com/vuln/426280/cti
Get alerted when CVE-2026-116231 or the next vulnerability affects your stack