CVE-2026-116232
Oray Pugongying X5 Pro SNMP snmp_set crlf injection
- Severity
- 9.4CVSSv4.0
- Exploitation
- None seen No known exploitation
- EPSS
- 0.44%as of 2026-10-26
- Products
- 1no fix yet
No known exploitation, and no fixed version published yet.
An attacker can send a crafted SNMP request to the Oray Pugongying X5 Pro router (7.6.1) that injects CRLF characters through the info.community argument handled by snmp_set, hijacking the SNMP handler's response stream. The flaw is remotely reachable, a public proof of concept exists, and the vendor did not respond to coordinated disclosure. No fixed version is listed, so isolate the management interface from untrusted networks and monitor SNMP traffic until Oray ships a patch.
What to do
No fixed version is published yet. Apply vendor mitigations or isolate the affected products.
| Product | Fixed version |
|---|---|
| Pugongying X5 Pro | none published |
Why it matters
EPSS estimates a 0.44% chance it is exploited in the next 30 days.
Scores 9.4 out of 10 (CVSSv4.0). That is remote damage without needing an account.
If you run any of the 1 products above and cannot patch today, assume it will be targeted and restrict access in the meantime.
Exploitation
- Status
- No known exploitation
- EPSS
- 0.44% chance of exploitation in 30 days · 37.63% percentile
Analysis
Public sources, summarised. This is context for your decision. The facts above are the ones to act on.
| Source | Adds | Summary |
|---|---|---|
| hol.org Research | Background | Rates the flaw Critical at CVSS 9.4, conflicting with strix.ai's 9.9, and explicitly states current sources do not list it as known exploited, so no active-attack monitoring trigger from this record. |
| vuldb.com News | Background | Identifies the affected target as Oray Pugongying X5 Pro 7.6.1 and pinpoints the snmp_set function in the SNMP Handler component, with manipulation of the info.c argument; no fixed version or mitigation given. |
| strix.ai News | Repeats others | Reports CVSS 9.9 for Pugongying X5 Pro 7.6.1, a score that disagrees with hol.org's 9.4; offers no patch, workaround or exploitation detail beyond the affected version. |
| strix.ai News | Repeats others | Page covers a different flaw (Plague Inc Evolved input validation); CVE-2026-116232 appears only as a passing cross-reference snippet with no detail. |
| strix.ai News | Repeats others | Page covers a separate Pugongying X5 Pro injection CVE; the referenced CVE-2026-116232 text is only a truncated fragment giving nothing usable for triage. |
| strix.ai News | Repeats others | Page is about an FFXIV Teamcraft XSS; CVE-2026-116232 appears solely as an incidental snippet, contributing no unique facts. |
References
- https://vuldb.com/vuln/426281
- https://vuldb.com/vuln/426281/cti
- https://vuldb.com/cve/CVE-2026-116232
- https://vuldb.com/submit/1005079
- https://app.notion.com/p/Oray-Pgyer-X5-Pro-Router-7-6-1-A-Community-Newline-Makes-snmpd-Run-Commands-as-Root-3ea797159f1580f3bae8c6e7d8b91d1f
Published
2026-10-26 17:49 UTC · last updated 2026-10-26 17:48 UTC