Live › vulnerability › CVE-2026-113395
Go to dashboardA path traversal flaw in the swmconfigupload CGI handler of DrayTek Vigor2960 firmware 1.5.1.6 lets a remote attacker manipulate file paths through the multipart argument. The exploit is public, and the vendor says the product is end-of-support with limited fixes.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners of DrayTek Vigor2960 routers running firmware 1.5.1.6 Revision 8218 are exposed, particularly if the web management interface is reachable from untrusted networks. The sources do not say whether authentication is required. Teams that do not run this model can skip it.
No product ranges from the sources yet.
show version in the CLI, and look for 1.5.1.6 Revision 8218/cgi-bin/mainfunction.cgi is reachable from the internet1.5.1.7, per the sourceEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file /cgi-bin/mainfunction.cgi of the component swmconfigupload. The manipulation of the argument multipart results in path traversal. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.5.1.7 is sufficient to fix this issue. The affected component should be upgraded. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.
This page as .md · .json · in your agent: get_signal("CVE-2026-113395")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.