Executive Summary
CVE-2026-116234 is a CRLF injection vulnerability in the IPsec Policy Handler of Oray Pugongying X5 Pro 7.6.1. Manipulating the secproto argument affects the file /etc/ipsec.conf, allowing injected line breaks to add or alter configuration directives. The attack can be launched remotely and a public exploit is available. No fixed version is reported.
Vulnerability Overview
| Attribute | Value |
|---|---|
| CVE ID | CVE-2026-116234 |
| CVSS 3.1 | 9.1 (Critical) |
| Type | CRLF Injection |
| Component | IPsec Policy Handler, secproto argument, /etc/ipsec.conf |
| Attack Vector | Network |
| Exploit Available | Yes (public) |
| Known Exploited | Not reported |
| Patch Available | No vendor response reported |
Affected Products
| Product | Version | Status |
|---|---|---|
| Oray Pugongying X5 Pro | 7.6.1 | Vulnerable, no fix reported |
Impact
Because the injected content lands in the IPsec configuration, a successful attacker could change VPN policy parameters, weaken or redirect tunnels, or break VPN availability. Exact impact depends on how the device parses the generated file.
Related Vulnerabilities
- CVE-2026-116233 — Dnsmasq
rent_time - CVE-2026-116235 — L2TP Authentication
Username
Mitigation
- Keep the management interface off the internet and limit it to a trusted management network.
- Audit
/etc/ipsec.confand VPN policies for unexpected entries. - Rotate VPN pre-shared keys if tampering is suspected.
- Watch the vendor and VulDB for a patch; plan replacement if none arrives.