CVE-2026-116236: Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload
A vulnerability has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this issue is the function plugininit of the file /tmp/uploadfiles of the component PPPoE WAN Setting Handler. Such manipulation of the argument pppdoptions leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are known to be affected?
The affected product and version identified are Oray Pugongying X5 Pro 7.6.1. The vulnerable functionality is in the PPPoE WAN Setting Handler, specifically plugin_init processing associated with /tmp/upload_files.
What level of access does an attacker need?
The attack can be launched remotely, requires high privileges, and does not require user interaction. Exploitation involves manipulating the pppd_options argument to achieve unrestricted file upload.
Is exploit activity a realistic concern?
Yes. A public exploit has been disclosed and may be used, so systems running the identified affected version should be treated as exposed where an attacker can reach the relevant management functionality.
Is a vendor fix available?
The provided information does not identify a fix or patched version. It states that the vendor was contacted early about the disclosure but did not respond.