CVE-2026-129452 | DrayTek Vigor2960 1.5.1.6 mainfunction.cgi set_table jsondata command injection

A vulnerability was found in DrayTek Vigor2960 1.5.1.6 and classified as very critical. This vulnerability affects the function set_table of the file /cgi-bin/mainfunction.cgi. Such manipulation of the argument jsondata leads to command injection.

This vulnerability is uniquely identified as CVE-2026-129452. The attack can be launched remotely. Moreover, an exploit is present.

It is suggested to upgrade the affected component.

The vendor recommends: “1.5.1.6 isn’t the latest version of 2960, the latest version fixes many security issues. And we have another one in our release plan which should solve the issues reported.”VulDB Recent EntriesRead More