Draytek Vigor2960 vulnerabilities

• draytek vigor2960 DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection CVE-2026-113397 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection CVE-2026-113396 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal CVE-2026-113395 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal CVE-2026-113394 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload CVE-2026-113393 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal CVE-2026-113392 5.3 MediumOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection CVE-2026-113391 9.4 CriticalOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection CVE-2026-113390 9.4 CriticalOctober 20, 2026
• draytek vigor2960 DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection CVE-2026-113389 9.4 CriticalOctober 20, 2026
• draytek vigor2960, vigor300b, vigor routers +2 more +4 more DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection CVE-2024-12987 In KEV EPSS 98.2% 6.9 MediumDecember 27, 2024
• draytek vigor2960, vigor300b, vigor2960 firmware +1 more +3 more DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection CVE-2024-12986 Public exploit EPSS 35.3% 6.9 MediumDecember 27, 2024
• draytek vigor2960 firmware An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an... CVE-2024-48074 8.0 HighOctober 28, 2024
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek... CVE-2024-43027 8.0 HighAugust 21, 2024
• draytek vigor2960, vigor2960 firmware +1 more DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal CVE-2023-6265 6.5 MediumNovember 22, 2023
• draytek vigor2960 firmware DrayTek Vigor2960 v1.5.1.4 was discovered to contain a command injection vulnerability via the... CVE-2023-24229 7.8 HighMarch 15, 2023
• draytek vigor 2960, vigor2960 firmware +1 more DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal CVE-2023-1009 EPSS 15.7% 6.5 MediumFebruary 24, 2023
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900... CVE-2021-43118 EPSS 34.8% 9.8 CriticalMarch 29, 2022
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more A Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5... CVE-2021-42911 9.8 CriticalMarch 29, 2022
• draytek vigor2960 firmware DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA... CVE-2020-19664 8.8 HighDecember 31, 2020
• draytek multiple vigor routers, vigor2960 firmware, vigor300b firmware +1 more +3 more On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi... CVE-2020-15415 In KEV EPSS 84.5% 9.8 CriticalJune 30, 2020
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more DrayTek Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1 is affected by a remote... CVE-2020-14472 9.8 CriticalJune 24, 2020
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware... CVE-2020-14473 9.8 CriticalJune 24, 2020
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1... CVE-2020-14993 9.8 CriticalJune 23, 2020
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices... CVE-2020-10828 EPSS 20.9% 9.8 CriticalMarch 26, 2020
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices... CVE-2020-10827 EPSS 20.9% 9.8 CriticalMarch 26, 2020
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more /cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows... CVE-2020-10826 EPSS 39.4% 9.8 CriticalMarch 26, 2020
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on... CVE-2020-10825 9.8 CriticalMarch 26, 2020
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more A stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek... CVE-2020-10824 9.8 CriticalMarch 26, 2020
• draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900... CVE-2020-10823 9.8 CriticalMarch 26, 2020
• draytek multiple vigor routers, vigor2960 firmware, vigor300b firmware +1 more +3 more DrayTek Vigor2960 1.3.1_Beta; Vigor3900 1.4.4_Beta; and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1... CVE-2020-8515 In KEVPublic exploit EPSS 100.0% 9.8 CriticalFebruary 1, 2020