Live › vulnerability › CVE-2026-116237
Go to dashboardOray Pugongying X5 Pro 7.6.1 ships a Dnsmasq component with a flaw that lets an attacker inject CRLF sequences. The exploit is public and the attack can be triggered remotely.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 10:29 UTC. All times on this page are UTC.
Systems running Oray Pugongying X5 Pro firmware 7.6.1 with the affected Dnsmasq component. The sources do not say which part of the component is affected or whether default configuration is exposed. The vendor did not respond to early disclosure, so no vendor fix is confirmed.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the component Dnsmasq. Performing a manipulation results in crlf injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · in your agent: get_signal("CVE-2026-116237")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.