CVE-2026-116235

{
  "etk_id": "ETK-2026-2637",
  "cve_id": "CVE-2026-116235",
  "display_id": "CVE-2026-116235",
  "ghsa_id": "GHSA-7qf3-fxvm-8v87",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "anchored",
  "title": "CRLF injection in Pugongying X5 Pro L2TP authentication",
  "summary": "Pugongying X5 Pro firmware 7.6.1 mishandles line-break characters in the username field used by L2TP authentication. An attacker able to reach and submit values to that interface may inject CRLF characters and influence how the supplied input is processed. The documented affected version is 7.6.1.",
  "mitigation": "Restrict remote access to the L2TP authentication interface to trusted administrative networks and reject username values containing carriage-return or line-feed characters where configuration permits. No fixed version is recorded; monitor vendor updates and upgrade when a corrected release is available.",
  "vendor": "Oray",
  "product": "Pugongying X5 Pro",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "7.6.1"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Pugongying X5 Pro",
      "purl": null
    }
  ],
  "cwes": [
    93
  ],
  "cvss_score": 9.4,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 17.22808678333333,
  "t0_at": "2026-10-26T08:45:16.165000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-26T08:45:16.165000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-26T08:45:16.165000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-116235"
    }
  }
}