Vigor2960 vulnerabilities
CVEs whose affected-version data names the Vigor2960 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
9 CVEsRSS
CVE-2026-113397High· 7.4PoCDrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection
A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest_certificate of the file /cgi-bin/mainfunction.cgi of the component IPsec Handler. Such manipulation of the argument…
CVE-2026-113392High· 7.4PoCDrayTek Vigor2960 Apmupload mainfunction.cgi path traversal
A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. Performing a manipulation of the argument action results in p…
CVE-2026-113394High· 7.4DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal
A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file /cgi-bin/mainfunction.cgi. The manipulation of the argument setSWMProfile leads to path traversal. It is possib…
CVE-2026-113393Medium· 6.3PoCDrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload
A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component commonupload. Executing a manipulation of the argument upload_pa…
CVE-2026-113395High· 7.4PoCDrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal
A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file /cgi-bin/mainfunction.cgi of the component swmconfigupload. The manipulation of the argument multi…
CVE-2026-113396High· 7.4PoCDrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection
A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of the file /cgi-bin/mainfunction.cgi of the component Rename Table Handler. This manipulation of the argument n…
CVE-2026-113390Critical· 9.9DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection
A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file /cgi-bin/mainfunction.cgi of the component CGI Interface. This manipulation of the argument usefile/usescript/…
CVE-2026-113391Critical· 9.9PoCDrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection
A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfunction.cgi of the component Upload Endpoint. Such manipulation leads to command injection. The at…
CVE-2026-113389Critical· 9.9PoCDrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection
A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectio…