CVE-2026-129452 · Infrastructure
NO FIX YET · SEE WHAT TO DO
The set_table function in the /cgi-bin/mainfunction.cgi web endpoint of DrayTek Vigor2960 firmware 1.5.1.6 does not sanitize the jsondata argument. A remote attacker can inject operating system commands through it, and public exploit details exist.
first public Nov 15, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Organizations running DrayTek Vigor2960 routers on firmware 1.5.1.6 are exposed, particularly where the web management interface is reachable from the internet. Routers on other firmware versions or with the management interface restricted to a trusted internal network are less exposed. The sources do not state whether the interface must be enabled or whether login is required.
Not affected if management-interface-not-exposed, other-firmware
Who cares draytek, network-appliance, router, vigor2960
1.5.1.6./cgi-bin/mainfunction.cgi, is reachable from the internet.1.5.1.7, per the NVD description.A vulnerability has been found in DrayTek Vigor2960 1.5.1.6. This vulnerability affects the function set_table of the file /cgi-bin/mainfunction.cgi. Such manipulation of the argument jsondata leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.7 is able to resolve this issue. It is suggested to upgrade the affected component. The vendor recommends: "1.5.1.6 isn't the latest version of 2960, the latest version fixes many security issues. And we have another one in our release plan which should solve the issues reported."
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.