CVE-2026-129453 | DrayTek Vigor2960 1.5.1.6 File Existence Check mainfunction.cgi check_file_exist upload_name heap-based overflow

November 14, 2026 Yanac

A vulnerability was found in DrayTek Vigor2960 1.5.1.6. It has been classified as very critical. This issue affects the function check_file_exist of the file /cgi-bin/mainfunction.cgi of the component File Existence Check. Performing a manipulation of the argument upload_name results in heap-based buffer overflow.

This vulnerability was named CVE-2026-129453. The attack may be initiated remotely. In addition, an exploit is available.

Upgrading the affected component is recommended.

The vendor recommends: “1.5.1.6 isn’t the latest version of 2960, the latest version fixes many security issues. And we have another one in our release plan which should solve the issues reported.”VulDB Recent EntriesRead More