CVE-2026-116237 | Oray Pugongying X5 Pro 7.6.1 Dnsmasq crlf injection

October 25, 2026 Yanac

A vulnerability classified as critical has been found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the component Dnsmasq. Performing a manipulation results in crlf injection.

This vulnerability is known as CVE-2026-116237. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More