CVE-2026-116233 | Oray Pugongying X5 Pro 7.6.1 Dnsmasq rent_time crlf injection

October 25, 2026 Yanac

A vulnerability identified as very critical has been detected in Oray Pugongying X5 Pro 7.6.1. This impacts an unknown function of the component Dnsmasq. The manipulation of the argument rent_time leads to crlf injection.

This vulnerability is documented as CVE-2026-116233. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More