CVE-2026-113392mediumCWE-22

CVE-2026-113392: fallo de gravedad media en DrayTek Vigor2960

DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal

Publicada el

Seguir esta CVE+ Monitorear Vigor2960

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

33Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 5.3epss 0.4%
A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. Performing a manipulation of the argument action results in path traversal. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 1.5.1.7 is able to resolve this issue. Upgrading the affected component is advised. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P
Productos afectados
DrayTek · Vigor2960
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — DrayTek Vigor2960

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-12987MEDIUMDrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injectionEPSS 98.2%KEVCVE-2024-12986MEDIUMDrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injectionEPSS 35.3%CVE-2026-113391CRITICALDrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injectionEPSS 2.1%CVE-2026-113389CRITICALDrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injectionEPSS 1.9%CVE-2026-113390CRITICALDrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injectionEPSS 1.9%CVE-2023-6265MEDIUMDrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversalEPSS 1.8%