Skip to content
OpenAdvisories

Product · DrayTek

Vigor2960

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-113393

    DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload

    A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component commonupload. Executing a manipulation of the argument upload_path/upload_name can lea…

    DrayTek Vigor2960 Network devices
  • Medium 6.5
    CVE-2023-6265

    DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal

    ** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbit…

    DrayTek Vigor2960 Network devices