CVE-2026-113396

A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function renametable of the file /cgi-bin/mainfunction.cgi of the component Rename Table Handler. This manipulation of the argument newtable causes command injection. The attack can be initiated...

CVE-2026-113396 DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection

A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function renametable of the file /cgi-bin/mainfunction.cgi of the component Rename Table Handler. This manipulation of the argument newtable causes command injection. The attack can be initiated...

CVE-2026-113396

A command injection vulnerability exists in the Rename Table Handler component of DrayTek Vigor2960 version 1.5.1.6 Revision 8218 . The flaw is located within the rename_table function of the /cgi-bin/mainfunction.cgi file, where improper handling of the newtable argument allows for remote code e...

CVE-2026-113396 DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection

A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function renametable of the file /cgi-bin/mainfunction.cgi of the component Rename Table Handler. This manipulation of the argument newtable causes command injection. The attack can be initiated...

DrayTek Vigor2960: Input validation error vulnerability

The DrayTek Vigor2960 1.5.1.6 revision 8218 version has a security vulnerability. This vulnerability stems from improper handling of the parameter newtable in the renametable function within the Rename Table Handler component. This could lead to remote command injection attacks...

CVE-2024-51245

In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the renametable function...

CVE-2024-51245

In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the renametable function...

CVE-2024-51245

CVE-2024-51245 affects DrayTek Vigor3900 1.5.1.3. Attackers can inject commands into the web-facing mainfunction.cgi and execute arbitrary code by invoking the rename_table function due to insufficient input validation. Public sources describe remote command execution as the outcome. Reported rem...

CVE-2024-51245: Improper Neutralization of Special Elements used in an OS Command

In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the renametable function...