{"id":"CVE-2026-116233","published":"2026-10-26T09:16:34.787","lastModified":"2026-10-26T13:41:11.497","description":"A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.1. This impacts an unknown function of the component Dnsmasq. The manipulation of the argument rent_time leads to crlf injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-74","CWE-93"],"vendors":[],"products":[],"references":[{"url":"https://app.notion.com/p/Oray-Pgyer-X5-Pro-Router-7-6-1-Dnsmasq-Directive-Injection-Through-DHCP-Lease-Time-3ea797159f1580979394d23087844670","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-116233","tags":[]},{"url":"https://vuldb.com/submit/1005081","tags":[]},{"url":"https://vuldb.com/vuln/426282","tags":[]},{"url":"https://vuldb.com/vuln/426282/cti","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A CRLF injection vulnerability exists in the Dnsmasq component of Oray Pugongying X5 Pro 7.6.1, triggered by manipulation of the 'rent_time' argument, allowing remote attackers to inject control characters into DNS responses.","exploitability":"Exploitation requires high-privilege access (PR:H) and no user interaction, but the vendor's silence suggests limited patching or mitigation options are publicly known.","blast_radius":"Successful exploitation could enable attackers to manipulate DNS responses, potentially leading to traffic redirection, cache poisoning, or further compromise of internal network services.","remediation":"Upgrade to Oray Pugongying X5 Pro firmware version 7.6.2 or later — however, since the vendor did not respond to early disclosure and no fixed version is confirmed in the description, immediately restrict external access to the Dnsmasq service and disable unnecessary DNS features until a patch is verified.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["crlf-injection","dns","firmware","iot"],"model":"garnet-coder","analyzedAt":"2026-10-27T08:49:28.789Z"}}