Description
A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. Performing a manipulation of the argument action results in path traversal. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 1.5.1.7 is able to resolve this issue. Upgrading the affected component is advised. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2026-10-20
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized File Modification via Path Traversal
Action: Patch Now
AI Analysis

Impact

This vulnerability allows a path traversal through manipulation of the action argument in /cgi-bin/mainfunction.cgi of the Apmupload component. While the CVE description does not confirm code execution or file read/write capabilities, it is inferred from the path traversal that a remote attacker could potentially manipulate files on the device’s filesystem. Such file manipulation could alter configuration files, corrupt firmware, or enable placement of malicious artifacts for later exploitation.

Affected Systems

The flaw affects the DrayTek Vigor2960 running firmware version 1.5.1.6 (Revision 8218). Devices that are no longer supported by DrayTek are particularly at risk. The official fix is the release of firmware 1.5.1.7, which removes the vulnerable code.

Risk and Exploitability

The CVSS score of 5.3 indicates moderate severity. No EPSS data is available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploitation evidence at present. The path traversal can be performed remotely, and a public exploit demonstrates file manipulation. Based on the description, it is inferred that attackers could manipulate device files, potentially leading to unauthorized modification of configuration or firmware and compromising filesystem integrity.

Generated by OpenCVE AI on October 20, 2026 at 15:58 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the firmware to 1.5.1.7 immediately.
  • If the device is critical to operations, isolate it from untrusted networks until a secure firmware version is installed.
  • Continuously monitor DrayTek security advisories and apply any future patches without delay.

Generated by OpenCVE AI on October 20, 2026 at 15:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 20 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Draytek vigor2960
Vendors & Products Draytek vigor2960

Tue, 20 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 20 Oct 2026 13:45:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. Performing a manipulation of the argument action results in path traversal. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 1.5.1.7 is able to resolve this issue. Upgrading the affected component is advised. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.
Title DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal
First Time appeared Draytek
Draytek vigor2960 Firmware
Weaknesses CWE-22
CPEs cpe:2.3:o:draytek:vigor2960_firmware:*:*:*:*:*:*:*:*
Vendors & Products Draytek
Draytek vigor2960 Firmware
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 7.4, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P'}

Subscriptions

Draytek Vigor2960 Vigor2960 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-20T16:06:14.838Z

Reserved: 2026-10-20T05:50:18.933Z

Link: CVE-2026-113392

cve-icon Vulnrichment

Updated: 2026-10-20T15:22:27.605Z

cve-icon NVD

Status : Deferred

Published: 2026-10-20T13:16:40.810

Modified: 2026-10-20T19:27:34.430

Link: CVE-2026-113392

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-20T19:45:13Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')