EUVD-2026-105001

A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component commonupload. Executing a manipulation of the argument uploadpath/uploadname can lead to unrestricted upload. The attack may...

DrayTek Vigor2960: Permissions, licensing, and access control issues

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a security vulnerability. This vulnerability stems from improper handling of parameters uploadpath/uploadname in the commonupload component of the file/cgi-bin/mainfunction.cgi. It could allow remote attackers to upload files without restrictions...