CVE-2026-129452

The DrayTek Vigor2960 (version 1.5.1.6 ) is vulnerable to a remote command injection vulnerability in the set_table function of the /cgi-bin/mainfunction.cgi file. This flaw occurs when the jsondata argument is improperly handled, allowing an attacker to execute arbitrary commands remotely. The e...