EUVD-2026-126014

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6. Affected by this issue is the function sub1E084 of the file /cgi-bin/mainfunction.cgi?action=doWebBackup. The manipulation of the argument option results in path traversal. It is possible to launch the attack remotely. The exploit is now...

CVE-2026-129450

A path traversal vulnerability exists in the DrayTek Vigor2960 (version 1.5.1.6) within the sub_1E084 function of the /cgi-bin/mainfunction.cgi?action=doWebBackup file. Attackers can exploit this by manipulating the option argument to access files outside the intended directory. This vulnerabilit...