EUVD-2026-114809

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function sessionget of the file session.lua of the component Session ID Handler. The manipulation of the argument user leads to insufficiently random values. The attack can be initiated remotely. The attack's...

CVE-2026-120223

A vulnerability exists in Oray Pugongying X5 Pro (up to version 7.6.1) within the Session ID Handler component. Specifically, the session_get function in the session.lua file is susceptible to the manipulation of the _user argument, which leads to the generation of insufficiently random values (C...