CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-113389 — A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affecte...

·Source: NIST NVD

Updated:

Executive Summary

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectiontype results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor explains: "2960 1.5.1.7 has correcte

Analysis

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectiontype results in command injection. The attack may be launched remotely. The exploit is now public and may be used. The vendor explains: "2960 1.5.1.7 has corrected many security issues. And 2960 is EoS with limited support, only major issues would be reviewed(e.g. unauthenticated vuln.)". This vulnerability only affects products that are no longer supported by the maintainer. CVSS Score: 9.9. Published: 2026-10-20T12:17:29.443.

Indicators of Compromise (3)

CVE (1)
CVE-2026-113389
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 20, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

UK and EU financial regulators seek answers from Google over cloud outage

The European Banking Authority and the UK's Financial Conduct Authority have been in contact with Google over the major cloud outage earlier this week that knocked out several bank websites.

Finextra
LOWVulnerabilityNEW

Ambulance Firm's $1M Settlement Mandates Data Destruction

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ambulance-firms-1m-settlement-mandates-data-destruction-image_small-1-a-33180.jpg" align=right hspace=4><b>State Deal Follows 2023 Hack of Archived Data and Resolves Separate Fraud Claims</b><br>A former ambulance company has agreed to pay Massachusetts regulators $1 million to resolve allegations of Medicaid billing fraud and als

Bank Info Security
MEDIUMVulnerability

Breach Roundup: Russian Hackers Hit Ukrainian Grain Firm

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/breach-roundup-image_small-2-a-33182.jpg" align=right hspace=4><b>Also: eMudhra Exits TLS Cert Biz, German Police Probe 2024 Synnovis Cyberattack</b><br>Russian hackers wiped a Ukrainian grain logistics firm, eMudhra killed its TLS certs biz, Germany investigated the 2024 Synnovis hack, OpenCode flaw, another Nikkei breach. A Revo

Bank Info Security