Browse all 7 CVE security advisories affecting Oray. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-116237 | Oray Pugongying X5 Pro Dnsmasq crlf injection — Pugongying X5 Pro CWE-93 | 8.4 | High | 2026-10-26 |
| CVE-2026-116236 | Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload — Pugongying X5 Pro CWE-434 | 7.2 | High | 2026-10-26 |
| CVE-2026-116235 | Oray Pugongying X5 Pro L2TP Authentication crlf injection — Pugongying X5 Pro CWE-93 | 9.1 | Critical | 2026-10-26 |
| CVE-2026-116234 | Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection — Pugongying X5 Pro CWE-93 | 9.1 | Critical | 2026-10-26 |
| CVE-2026-116233 | Oray Pugongying X5 Pro Dnsmasq crlf injection — Pugongying X5 Pro CWE-93 | 9.1 | Critical | 2026-10-26 |
| CVE-2026-116232 | Oray Pugongying X5 Pro SNMP snmp_set crlf injection — Pugongying X5 Pro CWE-93 | 9.9 | Critical | 2026-10-26 |
| CVE-2026-116231 | Oray Pugongying X5 Pro Ser2net crlf injection — Pugongying X5 Pro CWE-93 | 9.9 | Critical | 2026-10-26 |
This page lists every published CVE security advisory associated with Oray. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.