Description
A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectiontype results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-10-20
Score: 9.4 Critical
EPSS: n/a
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A command injection flaw exists in the set_table function of the /cgi-bin/mainfunction.cgi CGI process on DrayTek Vigor2960 routers. The vulnerable parameter sectiontype can be manipulated to execute arbitrary system commands. Because this endpoint is reachable over the network, an attacker only needs to send a crafted HTTP request to achieve code execution on the device, potentially compromising the entire router and any connected networks.

Affected Systems

The flaw affects DrayTek Vigor2960 firmware 1.5.1.6 Revision 8218, which is no longer supported by the manufacturer. Version 1.5.1.7 and later contain a fix that removes the vulnerable functionality.

Risk and Exploitability

The CVSS score of 9.4 indicates critical severity. EPSS is not available, so the precise exploitation probability is unknown, and the vulnerability is not currently listed in CISA's KEV catalog. Nevertheless, the flaw is publicly known, the exploit is available, and the remote nature of the command injection makes the risk high. An attacker can gain full control of the device and subsequently pivot to connected systems.

Generated by OpenCVE AI on October 20, 2026 at 14:42 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the device to DrayTek Vigor2960 firmware 1.5.1.7 or later, which removes the vulnerable CGI functionality.
  • Restrict external network access to the CGI interface by placing the device behind a firewall or using VLAN segmentation, limiting the attack surface.
  • If upgrading is not possible, disable or restrict the /cgi-bin/mainfunction.cgi endpoint so that the vulnerable functionality cannot be reached.

Generated by OpenCVE AI on October 20, 2026 at 14:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 20 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Draytek vigor2960
Vendors & Products Draytek vigor2960

Tue, 20 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 20 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
Description A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectiontype results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.
Title DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection
First Time appeared Draytek
Draytek vigor2960 Firmware
Weaknesses CWE-74
CWE-77
CPEs cpe:2.3:o:draytek:vigor2960_firmware:*:*:*:*:*:*:*:*
Vendors & Products Draytek
Draytek vigor2960 Firmware
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.9, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Draytek Vigor2960 Vigor2960 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-20T13:41:08.841Z

Reserved: 2026-10-20T05:50:07.473Z

Link: CVE-2026-113389

cve-icon Vulnrichment

Updated: 2026-10-20T13:41:04.391Z

cve-icon NVD

Status : Deferred

Published: 2026-10-20T12:17:29.443

Modified: 2026-10-20T19:27:34.430

Link: CVE-2026-113389

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-20T19:45:13Z

Weaknesses
  • CWE-74

    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

  • CWE-77

    Improper Neutralization of Special Elements used in a Command ('Command Injection')