Live › vulnerability › CVE-2026-113394
Go to dashboardA path traversal flaw in the setSWMProfile parameter of the Vigor2960 web management CGI lets a remote attacker reach files outside the intended directory. The vendor says the product is end of support and that this flaw only affects unsupported versions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running DrayTek Vigor2960 routers on firmware 1.5.1.6 Revision 8218, especially with the web management interface exposed to the internet. The sources say the exploit is public and the attack can be started remotely, but they do not say whether authentication is required. Teams on other DrayTek models or on newer Vigor2960 firmware can likely skip it.
No product ranges from the sources yet.
show version over the console; the affected build is 1.5.1.6 Revision 8218/cgi-bin/mainfunction.cgi externally1.5.1.7 or later, which the vendor says fixes many security issuesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file /cgi-bin/mainfunction.cgi. The manipulation of the argument setSWMProfile leads to path traversal. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.
This page as .md · .json · in your agent: get_signal("CVE-2026-113394")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.