DrayTek vulnerabilities
59 CVEs and advisories name DrayTek as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-71922DrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgi
- CVE-2026-71921DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi
- CVE-2026-71920DrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogout
- CVE-2026-71919DrayTek VigorSwitch Multiple Models OS Command Injection via sysreboot
- CVE-2026-71918DrayTek VigorSwitch Multiple Models OS Command Injection via webBackupAction
- CVE-2026-71917DrayTek VigorSwitch Multiple Models OS Command Injection via pingtrace
- CVE-2026-71916DrayTek VigorSwitch Multiple Models OS Command Injection via commandTable
- CVE-2026-71915DrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatus
- CVE-2026-71914DrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray_apm
- CVE-2026-71913DrayTek VigorAP Multiple Models OS Command Injection via upload_settings.cgi
- CVE-2026-71912DrayTek VigorAP Multiple Models Buffer Overflow via apautotest
- CVE-2026-71911DrayTek VigorAP Multiple Models Buffer Overflow via setLan
- CVE-2026-71910DrayTek VigorAP Multiple Models OS Command Injection via apautotest
- CVE-2026-71909DrayTek VigorAP Multiple Models OS Command Injection via InquierTime
- CVE-2026-71908DrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_test
- CVE-2026-71907DrayTek VigorAP Multiple Models OS Command Injection via setcamset
- CVE-2026-71906DrayTek VigorAP Multiple Models OS Command Injection via setLan
- CVE-2026-71905DrayTek VigorAP Multiple Models OS Command Injection via ExportSettings
- CVE-2026-71904DrayTek VigorAP Multiple Models OS Command Injection via tr069TestInform
- CVE-2022-50994DrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfunction.cgi
- CVE-2026-3040DrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injection
- CVE-2025-10547CVE-2025-10547
- CVE-2024-12987DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
- CVE-2024-12986DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection
- CVE-2023-6265DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal
- CVE-2023-1163DrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversal
- CVE-2023-1162DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection
- CVE-2023-1009DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal
- CVE-2020-3932Draytek VigorAP910C - Information Leakage