CVE-2026-113391: Command Injection in DrayTek Vigor2960
Description
CVE-2026-113391 is a critical command injection vulnerability in the DrayTek Vigor2960 router, specifically affecting version 1.5.1.6 Revision 8218. The flaw exists in the uploadlangs function of the /cgi-bin/mainfunction.cgi endpoint, allowing remote attackers to execute arbitrary commands. Exploit code has been publicly disclosed. The vendor recommends upgrading to version 1.5.1.7 to mitigate the issue, but notes that the product is end-of-support with limited ongoing maintenance.
CVSS v4.0
Score 9.4critical
Affected software
DrayTek
Vigor2960
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in DrayTek Vigor2960 1.5.1.6 Revision 8218 allows remote command injection via the uploadlangs function in the /cgi-bin/mainfunction.cgi component. The flaw enables attackers to execute arbitrary commands on the device without user interaction and with low attack complexity. The vendor has released version 1.5.1.7 which addresses this and other security issues. However, the product is end-of-support, and only major vulnerabilities are reviewed going forward.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary commands on the affected device, potentially leading to full system compromise. Given the high CVSS 9.4 score and the nature of command injection, the impact is critical. The vulnerability can be exploited without user interaction and with low complexity, increasing risk.
Mitigation Recommendations
Upgrade to DrayTek Vigor2960 version 1.5.1.7, which contains fixes for this and other security issues. Note that the product is end-of-support, so ongoing security updates are limited. Applying the official patch is the recommended mitigation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-10-20T05:50:15.239Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad766cd2cdf04f6562de069
Added to database: 10/20/2026, 13:04:13 UTC
Last enriched: 10/20/2026, 13:18:17 UTC
Last updated: 10/20/2026, 13:19:15 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.