DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
DrayTek Vigor: Mehrere Schwachstellen ermöglichen Codeausführung
Advisory ansehen veröffentlicht 2026-10-20
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in DrayTek Vigor ausnutzen, um Dateien zu manipulieren und beliebigen Programmcode auszuführen.
01
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-113397US | high7.4 | — | ||
A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest_certificate of the file /cgi-bin/mainfunction.cgi of the c… | ||||
| CVE-2026-113396US | high7.4 | — | ||
A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of the file /cgi-bin/mainfunction.cgi of the component… | ||||
| CVE-2026-113395US | high7.4 | — | ||
A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file /cgi-bin/mainfunction.cgi of the componen… | ||||
| CVE-2026-113394US | high7.4 | — | ||
A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file /cgi-bin/mainfunction.cgi. The manipulation of the arg… | ||||
| CVE-2026-113393US | medium6.3 | — | ||
A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component commonu… | ||||
| CVE-2026-113392US | high7.4 | — | ||
A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. Perf… | ||||
| CVE-2026-113391US | critical9.9 | — | ||
A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfunction.cgi of the component Upload Endpo… | ||||
| CVE-2026-113390US | critical9.9 | — | ||
A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file /cgi-bin/mainfunction.cgi of the component CGI Interf… | ||||
| CVE-2026-113389US | critical9.9 | — | ||
A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the compo… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- GitHub Advisory Database vom 2026-10-20external
- GitHub Advisory Database vom 2026-10-20external
- GitHub Advisory Database vom 2026-10-20external
- GitHub Advisory Database vom 2026-10-20external
- GitHub Advisory Database vom 2026-10-20external
- GitHub Advisory Database vom 2026-10-20external
- GitHub Advisory Database vom 2026-10-20external
- GitHub Advisory Database vom 2026-10-20external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan