CVE-2026-120224 in Pugongying X5 Pro
Prediction
by VulDB Data Team • 10/31/2026
A security flaw has been discovered in <a href="/product/oray:pugongying_x5_pro">Oray Pugongying X5 Pro up to 7.6.1</a>. Affected is the function <code>run_apis_by_json/run_async_task</code> of the component <em>API Authorization</em>. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.