CVE-2026-113392 | DrayTek Vigor2960 1.5.1.6 Revision 8218 Apmupload mainfunction.cgi action path traversal

October 20, 2026 Yanac

A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. It has been rated as critical. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. Performing a manipulation of the argument action results in path traversal. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is reported as CVE-2026-113392. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Upgrading the affected component is advised.

The vendor explains: “2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)”.VulDB Recent EntriesRead More