CVE Tools
Track your stack

Oray

3 CVEs tracked since 2026. Since Nov 2026, none of them reached CISA KEV.

Oray CVEs per month

Nov 2026 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Oray CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-1130

Products

The products that kept showing up in Oray's monthly top three, with their CVEs summed over those months.

  1. Pugongying X5 Pro31 month

Latest CVEs

The 11 most recently published vulnerabilities affecting Oray.

  1. CVE-2026-120225Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal9.1
  2. CVE-2026-120224Oray Pugongying X5 Pro API Authorization run_async_task improper authorization9.9
  3. CVE-2026-120223Oray Pugongying X5 Pro Session ID session.lua session_get random values3.1
  4. CVE-2026-116237Oray Pugongying X5 Pro Dnsmasq crlf injection8.4
  5. CVE-2026-116236Oray Pugongying X5 Pro PPPoE WAN Setting upload_files plugin_init unrestricted upload7.2
  6. CVE-2026-116235Oray Pugongying X5 Pro L2TP Authentication crlf injection9.1
  7. CVE-2026-116234Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection9.1
  8. CVE-2026-116233Oray Pugongying X5 Pro Dnsmasq crlf injection9.1
  9. CVE-2026-116232Oray Pugongying X5 Pro SNMP snmp_set crlf injection9.9
  10. CVE-2026-116231Oray Pugongying X5 Pro Ser2net crlf injection9.9
  11. CVE-2005-2382Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which allows local users to gain privileges by accessing the Help functionality.7.2

The record

Peak rank
#9 in Nov 2026
Busiest month shown
Nov 2026, 3 CVEs
Months with a KEV entry
0 since Nov 2026
Monthly snapshots
1 since 2026
Oray's full record, month by month