Live › vulnerability › CVE-2026-116234
Go to dashboardThe Oray Pugongying X5 Pro 7.6.1 IPsec Policy Handler does not sanitize the secproto argument, so CRLF characters can be injected into /etc/ipsec.conf. A remote attacker can use this to alter the IPsec configuration, and a public exploit exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 09:29 UTC. All times on this page are UTC.
Teams that run Oray Pugongying X5 Pro devices on firmware 7.6.1 with the IPsec Policy Handler exposed to the network. The sources do not say whether default configurations expose the affected argument. Teams without this device can skip it.
No product ranges from the sources yet.
7.6.1/etc/ipsec.conf for unexpected lines after the secproto entriesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the file /etc/ipsec.conf of the component IPsec Policy Handler. The manipulation of the argument secproto results in crlf injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-116234")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.