Threats tagged 'ghsa-672p-cvhv-7rhx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.4	CVE-2026-129451DrayTek Vigor2960 · Path Traversal Critical9.42026-11-15GCVE DatabaseCVE-2026-129451 A critical path traversal vulnerability exists in DrayTek Vigor2960 devices running firmware up to version 1.5.1.6. The flaw is in the app_guest_export function of /cgi-bin/mainfunction.cgi, allowing remote attackers to manipulate the filename argument to traverse directories. Exploit code has been published. Upgrading to version 1.5.1.7 mitigates the issue. Report on CVE-2026-129451 Vulnerability CWE-22 #ghsa-672p-cvhv-7rhx	GCVE Database	2026-11-15

Page 1 of 1