CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Oray Pugongying X5 Pro Router Improper Authorization Vulnerability (CVE-2026-120224)
[Affected Scope] Oray Pugongying X5 Pro router versions up to and including 7.6.1
[Impact] A restricted account can bypass authorization checks to remotely invoke sensitive administrative functions, such as a factory reset, via manipulated JSON batch API requests
[Mitigation] Restrict external access to the router's management interface and apply temporary access control lists (ACLs) until an official patch is released
LiteSpeed User-End cPanel Plugin Privilege Escalation Vulnerability (CVE-2026-48172) Security Advisory
[Affected Scope] LiteSpeed User-End cPanel Plugin versions prior to 2.4.5
[Impact] Unauthenticated remote attackers can escalate privileges (potentially to root) by exploiting improper handling of Redis features, with active exploitation observed in the wild.
[Mitigation] Immediately upgrade the plugin to the recommended minimum version of 2.4.7 or higher and perform IoC scanning using the provided command.