{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aoraypugongying_x5_pro/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:oray:pugongying_x5_pro:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-116231"},{"cvss":9.1,"id":"CVE-2026-116233"},{"cvss":9.1,"id":"CVE-2026-116234"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Oray Pugongying X5 Pro 7.6.1","Pugongying X5 Pro (7.6.1)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Oray"],"content_html":"\u003cp\u003eA security flaw has been identified in the Ser2net component of Oray Pugongying X5 Pro 7.6.1. Manipulation of the 'regmsg' argument results in CRLF injection. The attack can be initiated remotely. Public exploit code is available for this vulnerability. The vendor was contacted but did not respond.\u003c/p\u003e\n","date_modified":"2026-10-26T09:40:40Z","date_published":"2026-10-26T09:40:17Z","id":"https://feed.craftedsignal.io/briefs/2026-10-oray-x5-pro-crlf/","summary":"A security flaw in the Ser2net component of Oray Pugongying X5 Pro 7.6.1 allows for remote CRLF injection via manipulation of the regmsg argument.","title":"Oray Pugongying X5 Pro: CRLF injection in Ser2net (CVE-2026-116231)","url":"https://feed.craftedsignal.io/briefs/2026-10-oray-x5-pro-crlf/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:oray:pugongying_x5_pro:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}