Oray vulnerabilities
10 published CVEs name Oray among the affected products.
- 10Published CVEs10 of them scored
- 10Last 12 monthspublished in the last year
- 8Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120225
Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal
Oray · Pugongying X5 Pro
Critical9.4 - CVE-2026-120224
Oray Pugongying X5 Pro API Authorization run_async_task improper authorization
Oray · Pugongying X5 Pro
Critical9.4 - CVE-2026-120223
Oray Pugongying X5 Pro Session ID session.lua session_get random values
Oray · Pugongying X5 Pro
Low2.3 - CVE-2026-116237
Oray Pugongying X5 Pro Dnsmasq crlf injection
Oray · Pugongying X5 Pro
Critical9.3 - CVE-2026-116236
Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload
Oray · Pugongying X5 Pro
High8.6 - CVE-2026-116235
Oray Pugongying X5 Pro L2TP Authentication crlf injection
Oray · Pugongying X5 Pro
Critical9.4 - CVE-2026-116234
Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection
Oray · Pugongying X5 Pro
Critical9.4 - CVE-2026-116233
Oray Pugongying X5 Pro Dnsmasq crlf injection
Oray · Pugongying X5 Pro
Critical9.4 - CVE-2026-116232
Oray Pugongying X5 Pro SNMP snmp_set crlf injection
Oray · Pugongying X5 Pro
Critical9.4 - CVE-2026-116231
Oray Pugongying X5 Pro Ser2net crlf injection
Oray · Pugongying X5 Pro
Critical9.4