CVE-2026-116231

Summary

A CRLF injection vulnerability exists in the Ser2net component of Oray Pugongying X5 Pro 7.6.1, triggered by manipulation of the 'regmsg' argument, allowing remote attackers to inject control characters and potentially manipulate protocol behavior or log entries.

Exploitability

Exploitation requires low privileges (PR:L) and no user interaction (UI:N), with network-level access (AV:N), making it remotely exploitable by authenticated low-privilege users.

Blast radius

Given the CVSS 9.9 score and high confidentiality, integrity, and availability impact (C:H/I:H/A:H), successful exploitation could lead to full system compromise, including unauthorized data access, modification of device behavior, or service disruption.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to a patched firmware version if one is released by Oray; until then, disable the Ser2net service or restrict network access to the affected endpoint to trusted sources only, as no fixed version is currently published by the vendor.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.