Oray Pugongying X5 Pro

• CVE-2026-120225 Critical 9.1 Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal 0.7%
• CVE-2026-120224 Critical 9.9 Oray Pugongying X5 Pro API Authorization run_async_task improper authorization 0.4%
• CVE-2026-120223 Low 3.1 Oray Pugongying X5 Pro Session ID session.lua session_get random values 0.3%
• CVE-2026-116237 High 8.4 Oray Pugongying X5 Pro Dnsmasq crlf injection 0.4%
• CVE-2026-116236 High 7.2 Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload 0.4%
• CVE-2026-116235 Critical 9.1 Oray Pugongying X5 Pro L2TP Authentication crlf injection 0.6%
• CVE-2026-116234 Critical 9.1 Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection 0.5%
• CVE-2026-116233 Critical 9.1 Oray Pugongying X5 Pro Dnsmasq crlf injection 0.5%
• CVE-2026-116232 Critical 9.9 Oray Pugongying X5 Pro SNMP snmp_set crlf injection 0.4%
• CVE-2026-116231 Critical 9.9 Oray Pugongying X5 Pro Ser2net crlf injection 0.4%