6 matches found
CVE-2026-120224
A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function runapisbyjson/runasynctask of the component API Authorization. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been released to the public a...
CVE-2026-120224
A security flaw exists in Oray Pugongying X5 Pro (up to version 7.6.1) due to improper authorization within the API Authorization component. Specifically, the run_apis_by_json/run_async_task function can be manipulated to bypass authorization controls. This vulnerability allows for remote attacks...
EUVD-2026-114831
A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function runapisbyjson/runasynctask of the component API Authorization. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been released to the public a...
CVE-2026-120224 Oray Pugongying X5 Pro API Authorization run_async_task improper authorization
A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function runapisbyjson/runasynctask of the component API Authorization. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been released to the public a...
CVE-2026-120224 Oray Pugongying X5 Pro API Authorization run_async_task improper authorization
A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function runapisbyjson/runasynctask of the component API Authorization. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been released to the public a...
CVE-2026-120224: Oray Pugongying X5 Pro: A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1
A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function runapisbyjson/runasynctask of the component API Authorization. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been released to the public a...