CVE-2026-116236

A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugininit of the file /tmp/uploadfiles of the component PPPoE WAN Setting Handler. Such manipulation of the argument pppdoptions leads to unrestricted upload. The attack may be launched remotel...

CVE-2026-116236 Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload

A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugininit of the file /tmp/uploadfiles of the component PPPoE WAN Setting Handler. Such manipulation of the argument pppdoptions leads to unrestricted upload. The attack may be launched remotel...

CVE-2026-116236

A vulnerability exists in Oray Pugongying X5 Pro 7.6.1 within the PPPoE WAN Setting Handler component. Specifically, the plugin_init function in the /tmp/upload_files file is susceptible to a flaw where manipulation of the pppd_options argument leads to unrestricted upload . This vulnerability ca...

EUVD-2026-109682

A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugininit of the file /tmp/uploadfiles of the component PPPoE WAN Setting Handler. Such manipulation of the argument pppdoptions leads to unrestricted upload. The attack may be launched remotel...