CVE-2026-113392: Path Traversal in DrayTek Vigor2960
Description
A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. Performing a manipulation of the argument action results in path traversal. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 1.5.1.7 is able to resolve this issue. Upgrading the affected component is advised. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer.
CVSS v4.0
Score 5.3medium
Affected software
DrayTek
Vigor2960
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in DrayTek Vigor2960 1.5.1.6 Revision 8218 involves improper validation of the 'action' parameter in the /cgi-bin/mainfunction.cgi endpoint of the Apmupload component, enabling remote path traversal attacks. Such attacks can allow unauthorized access to files outside the intended directory. The vendor has addressed this issue in version 1.5.1.7, which includes multiple security fixes. The product is EoS, so only major security issues receive review.
Potential Impact
Successful exploitation allows remote attackers to perform path traversal, potentially accessing sensitive files on the device. The CVSS 4.0 score is 5.3 (medium severity), indicating a moderate risk with network attack vector, low complexity, and no user interaction required. The vulnerability could lead to information disclosure or further compromise depending on accessed files.
Mitigation Recommendations
Upgrade affected devices to DrayTek Vigor2960 version 1.5.1.7, which contains the fix for this vulnerability. Since the product is end-of-support, no further patches are expected beyond this version. Applying the upgrade is the recommended and effective mitigation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-10-20T05:50:18.933Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad76a532cdf04f6562f875f
Added to database: 10/20/2026, 13:19:15 UTC
Last enriched: 10/20/2026, 13:33:38 UTC
Last updated: 10/20/2026, 19:06:08 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.