https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T08:54:37.394691+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-15415 CVE-2020-15415 2026-10-08T08:54:37.410332+00:00

Affected: draytek vigor3900_firmware, draytek vigor2960_firmware, draytek vigor300b_firmware

On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell metacharacters in a filename when the text/x-python-script content type is used, a different issue than CVE-2020-14472.