CVE-2026-116235 | Oray Pugongying X5 Pro 7.6.1 L2TP Authentication username crlf injection

October 25, 2026 Yanac

A vulnerability marked as very critical has been reported in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is an unknown functionality of the component L2TP Authentication. This manipulation of the argument Username causes crlf injection.

This vulnerability appears as CVE-2026-116235. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More