CVE ID :CVE-2026-120224 Published : Nov. 1, 2026, 11:18 a.m. | 42 minutes ago Description :A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_by_json/run_async_task of the component API Authorization. The manipulation results in...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-120224 - Oray Pugongying X5 Pro API Authorization run_async_task improper authorization

VERWANDTEARTIKEL

CVE-2026-120225 - Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal

CVE-2026-120198 - WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection

CVE-2026-120197 - WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injection

CVE-2026-120195 - WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injection

CVE-2026-115560

CVE-2026-120189 - D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflow