Draytek vulnerabilities

Products

• Vigor3910 Firmware 60
• Vigor3900 Firmware 48
• Vigor2960 Firmware 21
• Vigor2925 Firmware 17
• Vigor2962 Firmware 17
• Vigor300b Firmware 17
• Vigor2133 Firmware 16
• Vigor2135 Firmware 16
• Vigor2762 Firmware 16
• Vigor2765 Firmware 16
• Vigor2766 Firmware 16
• Vigor2832 Firmware 16
• Vigor2862 Firmware 16
• Vigor2865 Firmware 16
• Vigor2866 Firmware 16
• Vigor2926 Firmware 16
• Vigor165 Firmware 15
• Vigor166 Firmware 15
• Vigor2620 Firmware 15
• Vigor2860 Firmware 15
• Vigor3912 Firmware 14
• Vigorlte200 Firmware 14
• Vigor1000b Firmware 13
• Vigor2915 Firmware 12
• Vigor2952 Firmware 12
• Vigor2960 12
• Vigor3220 Firmware 12
• Vigor2763 Firmware 11
• Vigor2927 Firmware 8
• Vigorconnect 7
• Vigor 2960 4
• Vigorap 910c Firmware 4
• Vigor2135ac Firmware 3
• Vigor2135fvac Firmware 3
• Vigor2135vac Firmware 3
• Vigor2765ac Firmware 3
• Vigor2766ac Firmware 3
• Vigor2766vac Firmware 3
• Vigor2862ac Firmware 3
• Vigor2862b Firmware 3

Show 56 moreShow less

• Vigor2862bn Firmware 3
• Vigor2862lac Firmware 3
• Vigor2862l Firmware 3
• Vigor2862ln Firmware 3
• Vigor2862n Firmware 3
• Vigor2862vac Firmware 3
• Vigor2865ac Firmware 3
• Vigor2865ax Firmware 3
• Vigor2865lac Firmware 3
• Vigor2865l Firmware 3
• Vigor2865vac Firmware 3
• Vigor2866ac Firmware 3
• Vigor2866ax Firmware 3
• Vigor2866lac Firmware 3
• Vigor2866l Firmware 3
• Vigor2866vac Firmware 3
• Vigor2915ac Firmware 3
• Vigor2927ac Firmware 3
• Vigor2927ax Firmware 3
• Vigor2927lac Firmware 3
• Vigor2927l Firmware 3
• Vigor2927vac Firmware 3
• Multiple Vigor Routers 2
• Vigor130 Firmware 2
• Vigor167 Firmware 2
• Vigor2133ac Firmware 2
• Vigor2133fvac Firmware 2
• Vigor2133n Firmware 2
• Vigor2133vac Firmware 2
• Vigor2135ax Firmware 2
• Vigor2620l Firmware 2
• Vigor2620ln Firmware 2
• Vigor2762ac Firmware 2
• Vigor2762n Firmware 2
• Vigor2762vac Firmware 2
• Vigor2763ac Firmware 2
• Vigor2765ax Firmware 2
• Vigor2765vac Firmware 2
• Vigor2766ax Firmware 2
• Vigor2832n Firmware 2
• Vigor2926ac Firmware 2
• Vigor2926lac Firmware 2
• Vigor2926l Firmware 2
• Vigor2926ln Firmware 2
• Vigor2926n Firmware 2
• Vigor2926vac Firmware 2
• Vigor2927f Firmware 2
• Vigor2952p Firmware 2
• Vigor 2960 Firmware 2
• Vigor2962p Firmware 2
• Vigor300b 2
• Vigorap 1000c Firmware 2
• Vigorap 903 Firmware 2
• Vigorap 912c Firmware 2
• Vigorap 918r Firmware 2
• Vigorlte 200n Firmware 2

Newest

• draytek vigor2960 DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection CVE-2026-113397 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection CVE-2026-113396 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal CVE-2026-113395 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal CVE-2026-113394 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload CVE-2026-113393 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal CVE-2026-113392 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection CVE-2026-113391 9.4 CriticalOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection CVE-2026-113390 9.4 CriticalOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection CVE-2026-113389 9.4 CriticalOctober 20, 2026
• draytek vigor 2960 DrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfunction.cgi CVE-2022-50994 9.2 CriticalMay 8, 2026
• draytek vigor 300b, vigor300b firmware +1 more DrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injection CVE-2026-3040 EPSS 10.1% 5.1 MediumFebruary 23, 2026
• draytek vigor1000b firmware, vigor2133 firmware, vigor2135 firmware +20 more +22 more Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8... CVE-2024-51139 9.8 CriticalFebruary 27, 2025
• draytek vigor1000b firmware, vigor2133 firmware, vigor2135 firmware +20 more +22 more Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and... CVE-2024-51138 9.8 CriticalFebruary 27, 2025
• draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8,... CVE-2024-41340 8.4 HighFebruary 27, 2025
• draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior... CVE-2024-41339 8.8 HighFebruary 27, 2025
• draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200... CVE-2024-41338 7.5 HighFebruary 27, 2025
• draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 more Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860... CVE-2024-41334 8.8 HighFebruary 27, 2025
• draytek vigor2960, vigor300b, vigor routers +2 more +4 more DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection CVE-2024-12987 In KEV EPSS 98.2% 6.9 MediumDecember 27, 2024
• draytek vigor2960, vigor300b, vigor2960 firmware +1 more +3 more DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection CVE-2024-12986 Public exploit EPSS 35.3% 6.9 MediumDecember 27, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51253 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51251 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51249 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51246 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This... CVE-2024-45893 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This... CVE-2024-45891 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability This... CVE-2024-45890 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This... CVE-2024-45889 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs... CVE-2024-45888 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This... CVE-2024-45887 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This... CVE-2024-45885 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This... CVE-2024-45884 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs... CVE-2024-45882 8.0 HighNovember 4, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51252 9.8 CriticalNovember 1, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51248 8.8 HighNovember 1, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51247 8.8 HighNovember 1, 2024
• draytek vigor3900 firmware In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51245 8.8 HighNovember 1, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51244 8.8 HighNovember 1, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and... CVE-2024-51260 9.8 CriticalOctober 31, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and... CVE-2024-51259 9.8 CriticalOctober 31, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and... CVE-2024-51255 9.8 CriticalOctober 31, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and... CVE-2024-51254 8.8 HighOctober 31, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51304 8.8 HighOctober 30, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51301 8.8 HighOctober 30, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51300 8.8 HighOctober 30, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51299 8.8 HighOctober 30, 2024
• draytek vigor3900, vigor3900 firmware +1 more In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51298 9.8 CriticalOctober 30, 2024
• draytek vigor3900 firmware In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and... CVE-2024-51296 8.8 HighOctober 30, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and... CVE-2024-51258 8.8 HighOctober 30, 2024
• draytek vigor3900 firmware DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and... CVE-2024-51257 8.8 HighOctober 30, 2024
• draytek vigor2960 firmware An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an... CVE-2024-48074 8.0 HighOctober 28, 2024
• Show olderLoading…