Skip to content
OpenAdvisories

Vendor

Oray

10 known vulnerabilities.

Products

Pugongying X5 Pro 10
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-120223

    Oray Pugongying X5 Pro Session ID session.lua session_get random values

    A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session_get of the file session.lua of the component Session ID Handler. The manipulation of the argument _user leads to insufficiently random values. The attack c…

    Oray Pugongying X5 Pro