---
id: "CVE-2026-129453"
page: "https://infrastack.ai/live/CVE-2026-129453"
kind: "vulnerability"
aliases: ["CVE-2026-129453"]
title: "DrayTek Vigor2960 1.5.1.6: heap overflow in check_file_exist (authenticated per reporter); public PoC"
severity: "critical"
cvss: 9.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Vigor2960 firmware", "fixed": ["1.5.1.7"], "affected": "1.5.1.6", "ecosystem": "vendor"}]
ecosystems: []
tags: ["authenticated", "draytek", "end-of-support", "firmware", "infrastructure", "router", "routers", "vigor2960"]
not_affected_if: ["admin-interface-not-exposed", "firmware-1.5.1.7", "no-remote-web-admin", "other-firmware-version"]
published_at: "2026-11-15T14:17:26+00:00"
first_seen_at: "2026-11-15T14:36:15+00:00"
updated_at: "2026-11-15T14:38:17+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-129453", "first_seen_at": "2026-11-15T14:36:15+00:00"}, {"source": "analyst", "url": "https://vuldb.com/vuln/437464", "first_seen_at": "2026-11-15T14:38:17+00:00", "cites": ["https://vuldb.com/vuln/437464", "https://www.draytek.nl/storage/DrayTek_Vigor2960_V1.5.1.7_release-note.pdf"]}]
exploit_sources: []
---

# DrayTek Vigor2960 1.5.1.6: heap overflow in check_file_exist (authenticated per reporter); public PoC

Link for people: https://infrastack.ai/live/CVE-2026-129453 (this .md is for agents)

DrayTek Vigor2960 firmware 1.5.1.6 (revision 8218) has a heap-based buffer overflow in check_file_exist in /cgi-bin/mainfunction.cgi, via the upload_name argument. It is remotely reachable through the web interface. The reporter's submission calls it authenticated, so login is needed. A public proof of concept exists and no in-the-wild exploitation is reported. VulDB lists 1.5.1.7 as the fix. DrayTek's quoted statement says 1.5.1.6 is not the latest and another release is planned. The Vigor2960 is end-of-support with limited fixes.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Vigor2960 firmware affected 1.5.1.6 fixed 1.5.1.7

## How to check

Check the firmware version in the router's web admin (System Maintenance > Firmware Information). 1.5.1.6 is the affected version. Also check whether the web admin (HTTP/HTTPS) is reachable from the WAN or an untrusted network.

## Fix

Upgrade to Vigor2960 firmware 1.5.1.7 (fw.draytek.com.tw/Vigor2960/Firmware/v1.5.1.7/). This comes from VulDB; DrayTek's 1.5.1.7 release note says only 'Improve Web CGI Security' and does not name this CVE, so treat it as likely but unconfirmed. Restrict web admin access to trusted networks meanwhile.

## Timeline

- 2026-11-15T14:36:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-129453
- 2026-11-15T14:38:17+00:00 analyst https://vuldb.com/vuln/437464 — VulDB (CNA) entry says fix is 1.5.1.7 and the submission title says Authenticated; DrayTek's own advisory page does not list it, and the 1.5.1.7 release note only says 'Improve Web CGI Security' with no CVE. Nothing verified. Exa search worked; X not checked.

## Documents

- [advisory] VulDB VDB-437464 CVE-2026-129453 https://vuldb.com/vuln/437464
- [fix] DrayTek Vigor2960 1.5.1.7 release note https://www.draytek.nl/storage/DrayTek_Vigor2960_V1.5.1.7_release-note.pdf

## From the sources

A vulnerability was found in DrayTek Vigor2960 1.5.1.6. This issue affects the function check_file_exist of the file /cgi-bin/mainfunction.cgi of the component File Existence Check. Performing a manipulation of the argument upload_name results in heap-based buffer overflow. The attack may be initiated remotely. The exploit has been made public and could be used. Upgrading to version 1.5.1.7 is capable of addressing this issue. Upgrading the affected component is recommended. The vendor recommends: "1.5.1.6 isn't the latest version of 2960, the latest version fixes many security issues. And we have another one in our release plan which should solve the issues reported."

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_