CVE-2026-116234: Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-26 · updated 2026-10-26
Weakness: CWE-74

Description

A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the file /etc/ipsec.conf of the component IPsec Policy Handler. The manipulation of the argument secproto results in crlf injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Summary

A CRLF injection flaw exists in Oray Pugongying X5 Pro 7.6.1 within the IPsec Policy Handler, where manipulation of the secproto argument in /etc/ipsec.conf allows injection of arbitrary line breaks. This can be triggered remotely and carries a critical CVSS score of 9.1. A public exploit is available and may be used, though the vendor did not respond to the disclosure. Users should apply any available vendor fix or restrict remote access to the affected interface until a patch is released.

توجد ثغرة حقن CRLF في Oray Pugongying X5 Pro 7.6.1 ضمن مكوّن IPsec Policy Handler، حيث يؤدي التلاعب بالوسيط secproto في الملف /etc/ipsec.conf إلى حقن فواصل أسطر عشوائية. يمكن استغلال الثغرة عن بُعد، وقد حصلت على درجة CVSS حرجة تبلغ 9.1. يوجد استغلال علني وقد يُستخدم فعلياً، في حين لم يستجب المورّد للإفصاح. يُنصح المستخدمون بتطبيق أي إصلاح متاح من المورّد أو تقييد الوصول البعيد إلى الواجهة المتأثرة ريثما يصدر تحديث.

Affected products

Oray Pugongying X5 Pro: 7.6.1

References

Get alerted when CVE-2026-116234 or the next vulnerability affects your stack