[ Vendor · 18 CVEs ]
DrayTek
CVEs affecting DrayTek published in the last 30 days, plus any DrayTek CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113397 | 20 Oct 2026 | CVSS 7.4 | DrayTek Vigor2960A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest_certificate of the file… | |
| CVE-2026-113394 | 20 Oct 2026 | CVSS 7.4 | DrayTek Vigor2960A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file… | |
| CVE-2026-113395 | 20 Oct 2026 | CVSS 7.4 | DrayTek Vigor2960A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file… | |
| CVE-2026-113396 | 20 Oct 2026 | CVSS 7.4 | DrayTek Vigor2960A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of the file… | |
| CVE-2026-113393 | 20 Oct 2026 | CVSS 6.3 | DrayTek Vigor2960A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file… | |
| CVE-2026-113390 | 20 Oct 2026 | CVSS 9.9 | DrayTek Vigor2960A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file… | |
| CVE-2026-113391 | 20 Oct 2026 | CVSS 9.9 | DrayTek Vigor2960A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file… | |
| CVE-2026-113392 | 20 Oct 2026 | CVSS 7.4 | DrayTek Vigor2960A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi… | |
| CVE-2026-113389 | 20 Oct 2026 | CVSS 9.9 | DrayTek Vigor2960A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file… | |
| CVE-2024-12987 | 27 Dec 2024 | CVSS 9.8 | DrayTek Vigor Routers OS Command InjectionA vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file… | Exploited |
| CVE-2021-20123 | 13 Oct 2021 | CVSS 7.5 | Draytek VigorConnect Path TraversalA local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint… | Exploited |
| CVE-2021-20123 | 13 Oct 2021 | CVSS 7.5 | Draytek VigorConnect Path TraversalA local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint… | Exploited |
| CVE-2021-20124 | 13 Oct 2021 | CVSS 7.5 | Draytek VigorConnect Path TraversalA local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An… | Exploited |
| CVE-2021-20124 | 13 Oct 2021 | CVSS 7.5 | Draytek VigorConnect Path TraversalA local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An… | Exploited |
| CVE-2020-15415 | 30 Jun 2020 | CVSS 9.8 | DrayTek Multiple Vigor Routers OS Command InjectionOn DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell… | Exploited |
| CVE-2020-15415 | 30 Jun 2020 | CVSS 9.8 | DrayTek Multiple Vigor Routers OS Command InjectionOn DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi/cvmcfgupload allows remote command execution via shell… | Exploited |
| CVE-2020-8515 | 1 Feb 2020 | CVSS 9.8 | Multiple DrayTek Vigor Routers Web Management PageDrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as… | Exploited |
| CVE-2020-8515 | 1 Feb 2020 | CVSS 9.8 | Multiple DrayTek Vigor Routers Web Management PageDrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as… | Exploited |