Product

Vigor2960 (<= 1.5.1.6 Revision 8218)

1 brief RSS

DrayTek Vigor2960: Command injection in CGI Process (CVE-2026-113389)

DrayTek Vigor2960 firmware version 1.5.1.6 Revision 8218 is vulnerable to unauthenticated remote command injection via the set_table function in mainfunction.cgi.

PoC Vigor2960 +1 network-device command-injection vulnerability cve-2026-113389 cve-2026-113390 remote-code-execution network-infrastructure

1r 2t 4c 2h ago