DrayTek vulnerabilities
17 published CVEs name DrayTek among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 17
- Last 12 months
- 11
- Critical
- 4
- Known exploited
- 1
Critical 4High 1Medium 12Low 0Not scored 0
CVEs per yearBy the year they were published
- 20234
- 20242
- 202611
Known exploitedNewest addition to KEV first
- CVE-2024-12987
DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
DrayTek · Vigor2960
ExploitedMedium6.9
Newest CVEs
- CVE-2026-113397
DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection
DrayTek · Vigor2960
Medium5.3 - CVE-2026-113396
DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection
DrayTek · Vigor2960
Medium5.3 - CVE-2026-113395
DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal
DrayTek · Vigor2960
Medium5.3 - CVE-2026-113394
DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal
DrayTek · Vigor2960
Medium5.3 - CVE-2026-113393
DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload
DrayTek · Vigor2960
Medium5.3 - CVE-2026-113392
DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal
DrayTek · Vigor2960
Medium5.3 - CVE-2026-113391
DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection
DrayTek · Vigor2960
Critical9.4 - CVE-2026-113390
DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection
DrayTek · Vigor2960
Critical9.4 - CVE-2026-113389
DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection
DrayTek · Vigor2960
Critical9.4 - CVE-2022-50994
DrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfunction.cgi
DrayTek · Vigor 2960
Critical9.2