Oray Pugongying X5 Pro 7.6.1 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/oray-pugongying-x5-pro-7.6.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 09:40:17 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgOray Pugongying X5 Pro: CRLF injection in Ser2net (CVE-2026-116231)https://feed.craftedsignal.io/briefs/2026-10-oray-x5-pro-crlf/Mon, 26 Oct 2026 09:40:17 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-oray-x5-pro-crlf/A security flaw in the Ser2net component of Oray Pugongying X5 Pro 7.6.1 allows for remote CRLF injection via manipulation of the regmsg argument.<p>A security flaw has been identified in the Ser2net component of Oray Pugongying X5 Pro 7.6.1. Manipulation of the 'regmsg' argument results in CRLF injection. The attack can be initiated remotely. Public exploit code is available for this vulnerability. The vendor was contacted but did not respond.</p> criticaladvisory