CVE-2026-120225

A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function configrestoreex of the file /etc/openwrtrelease. This manipulation of the argument filename causes relative path traversal. The attack may be initiated remotely. The exploit has be...

CVE-2026-120225

A relative path traversal vulnerability exists in Oray Pugongying X5 Pro (versions up to 7.6.1). The flaw is located in the config_restore_ex function within the /etc/openwrt_release file, where improper handling of the filename argument allows for path traversal. This vulnerability can be trigge...

CVE-2026-120225 Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal

A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function configrestoreex of the file /etc/openwrtrelease. This manipulation of the argument filename causes relative path traversal. The attack may be initiated remotely. The exploit has be...

EUVD-2026-114832

A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function configrestoreex of the file /etc/openwrtrelease. This manipulation of the argument filename causes relative path traversal. The attack may be initiated remotely. The exploit has be...