CVE-2026-116234 | Oray Pugongying X5 Pro 7.6.1 IPsec Policy /etc/ipsec.conf secproto crlf injection

October 25, 2026 Yanac

A vulnerability labeled as very critical has been found in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the file /etc/ipsec.conf of the component IPsec Policy Handler. The manipulation of the argument secproto results in crlf injection.

This vulnerability is reported as CVE-2026-116234. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More