Live › vulnerability › CVE-2026-113397
Go to dashboardThe DrayTek Vigor2960 1.5.1.6 router accepts a crafted option argument in the IPsec certificate request handler at /cgi-bin/mainfunction.cgi, which lets a remote attacker inject operating system commands. A public exploit has been disclosed, and the vendor says the product is end-of-support with limited fixes.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running DrayTek Vigor2960 routers on firmware are exposed, especially if the IPsec handler or web management interface is reachable from untrusted networks. Sources do not say whether the flaw is reachable without authentication, so treat the device as at risk until the firmware is confirmed. Teams on newer firmware or with no Vigor2960 in service can skip it.
1.5.1.6 Revision 8218No product ranges from the sources yet.
1.5.1.6 Revision 8218.1.5.1.7 per the sources, which the vendor says corrects many security issues.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest_certificate of the file /cgi-bin/mainfunction.cgi of the component IPsec Handler. Such manipulation of the argument option leads to command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.5.1.7 mitigates this issue. Upgrading the affected component is recommended. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.
This page as .md · .json · in your agent: get_signal("CVE-2026-113397")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.