Live › vulnerability › CVE-2026-113389
Go to dashboardAuthenticated (low-privilege) command injection in set_table of /cgi-bin/mainfunction.cgi on the end-of-support DrayTek Vigor2960 (firmware 1.5.1.6 Rev 8218). The sectiontype argument reaches an OS command. A PoC is public. DrayTek has published no advisory for it and says it will only review major issues such as unauthenticated ones.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Vigor2960 | vendor | 1.5.1.6 Revision 8218 (other versions unknown) | – |
1.5.1.6 (Revision 8218) is confirmed affected1.5.1.7 corrected many security issues but has not said it fixes this one1.5.1.7 as a minimumEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectiontype results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.
This page as .md · .json · in your agent: get_signal("CVE-2026-113389")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.