DrayTek vulnerabilities
59 CVEs and advisories name DrayTek as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-113397DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection
- CVE-2026-113396DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection
- CVE-2026-113395DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal
- CVE-2026-113394DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal
- CVE-2026-113393DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload
- CVE-2026-113392DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal
- CVE-2026-113391DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection
- CVE-2026-113390DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection
- CVE-2026-113389DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection
- CVE-2026-71943DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNet
- CVE-2026-71942DrayTek VigorSwitch Multiple Models Buffer Overflow via mail_mailalert
- CVE-2026-71941DrayTek VigorSwitch Multiple Models Buffer Overflow via diag_logmail
- CVE-2026-71940DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Edit ACE
- CVE-2026-71939DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACE
- CVE-2026-71938DrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrp
- CVE-2026-71937DrayTek VigorSwitch Multiple Models Buffer Overflow via poe_schedule_profile
- CVE-2026-71936DrayTek VigorSwitch Multiple Models Buffer Overflow via sysreboot
- CVE-2026-71935DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction
- CVE-2026-71934DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace
- CVE-2026-71933DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions
- CVE-2026-71932DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile
- CVE-2026-71931DrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgrade
- CVE-2026-71930DrayTek VigorSwitch Multiple Models OS Command Injection via setTime
- CVE-2026-71929DrayTek VigorSwitch Multiple Models OS Command Injection via setDevProto
- CVE-2026-71928DrayTek VigorSwitch Multiple Models OS Command Injection via fdftDevice
- CVE-2026-71927DrayTek VigorSwitch Multiple Models OS Command Injection via rebDevice
- CVE-2026-71926DrayTek VigorSwitch Multiple Models OS Command Injection via setDevice
- CVE-2026-71925DrayTek VigorSwitch Multiple Models OS Command Injection via getDetail
- CVE-2026-71924DrayTek VigorSwitch Multiple Models OS Command Injection via getVid
- CVE-2026-71923DrayTek VigorSwitch Multiple Models OS Command Injection via auth_set