CVEs we hold for Draytek

Records whose assigning authority named Draytek as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-71943DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNetDrayTek Corporation VigorSwitch P2540x

CVE-2026-71942DrayTek VigorSwitch Multiple Models Buffer Overflow via mail_mailalertDrayTek Corporation VigorSwitch P2540x

CVE-2026-71941DrayTek VigorSwitch Multiple Models Buffer Overflow via diag_logmailDrayTek Corporation VigorSwitch P2540x

CVE-2026-71940DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Edit ACEDrayTek Corporation VigorSwitch P2540x

CVE-2026-71939DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACEDrayTek Corporation VigorSwitch P2540x

CVE-2026-71938DrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrpDrayTek Corporation VigorSwitch P2540x

CVE-2026-71937DrayTek VigorSwitch Multiple Models Buffer Overflow via poe_schedule_profileDrayTek Corporation VigorSwitch P2540x

CVE-2026-71936DrayTek VigorSwitch Multiple Models Buffer Overflow via sysrebootDrayTek Corporation VigorSwitch P2540x

CVE-2026-71935DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupActionDrayTek Corporation VigorSwitch P2540x

CVE-2026-71934DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtraceDrayTek Corporation VigorSwitch P2540x

CVE-2026-71933DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog FunctionsDrayTek Corporation VigorSwitch P2540x

CVE-2026-71932DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFileDrayTek Corporation VigorSwitch P2540x

CVE-2026-71931DrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgradeDrayTek Corporation VigorSwitch P2540x

CVE-2026-71930DrayTek VigorSwitch Multiple Models OS Command Injection via setTimeDrayTek Corporation VigorSwitch P2540x

CVE-2026-71929DrayTek VigorSwitch Multiple Models OS Command Injection via setDevProtoDrayTek Corporation VigorSwitch P2540x

CVE-2026-71928DrayTek VigorSwitch Multiple Models OS Command Injection via fdftDeviceDrayTek Corporation VigorSwitch P2540x

CVE-2026-71927DrayTek VigorSwitch Multiple Models OS Command Injection via rebDeviceDrayTek Corporation VigorSwitch P2540x

CVE-2026-71926DrayTek VigorSwitch Multiple Models OS Command Injection via setDeviceDrayTek Corporation VigorSwitch P2540x

CVE-2026-71925DrayTek VigorSwitch Multiple Models OS Command Injection via getDetailDrayTek Corporation VigorSwitch P2540x

CVE-2026-71924DrayTek VigorSwitch Multiple Models OS Command Injection via getVidDrayTek Corporation VigorSwitch P2540x

CVE-2026-71923DrayTek VigorSwitch Multiple Models OS Command Injection via auth_setDrayTek Corporation VigorSwitch P2540x

CVE-2026-71922DrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgiDrayTek Corporation VigorSwitch P2540x

CVE-2026-71921DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgiDrayTek Corporation VigorSwitch P2540x

CVE-2026-71920DrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogoutDrayTek Corporation VigorSwitch P2540x

CVE-2026-71919DrayTek VigorSwitch Multiple Models OS Command Injection via sysrebootDrayTek Corporation VigorSwitch P2540x

CVE-2026-71918DrayTek VigorSwitch Multiple Models OS Command Injection via webBackupActionDrayTek Corporation VigorSwitch P2540x

CVE-2026-71917DrayTek VigorSwitch Multiple Models OS Command Injection via pingtraceDrayTek Corporation VigorSwitch P2540x

CVE-2026-71916DrayTek VigorSwitch Multiple Models OS Command Injection via commandTableDrayTek Corporation VigorSwitch P2540x

CVE-2026-71915DrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatusDrayTek Corporation VigorSwitch P2540x

CVE-2026-71914DrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray_apmDrayTek Corporation VigorAP 903

CVE-2026-71913DrayTek VigorAP Multiple Models OS Command Injection via upload_settings.cgiDrayTek Corporation VigorAP 903

CVE-2026-71912DrayTek VigorAP Multiple Models Buffer Overflow via apautotestDrayTek Corporation VigorAP 903

CVE-2026-71911DrayTek VigorAP Multiple Models Buffer Overflow via setLanDrayTek Corporation VigorAP 903

CVE-2026-71910DrayTek VigorAP Multiple Models OS Command Injection via apautotestDrayTek Corporation VigorAP 903

CVE-2026-71909DrayTek VigorAP Multiple Models OS Command Injection via InquierTimeDrayTek Corporation VigorAP 903

CVE-2026-71908DrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_testDrayTek Corporation VigorAP 903

CVE-2026-71907DrayTek VigorAP Multiple Models OS Command Injection via setcamsetDrayTek Corporation VigorAP 903

CVE-2026-71906DrayTek VigorAP Multiple Models OS Command Injection via setLanDrayTek Corporation VigorAP 903

CVE-2026-71905DrayTek VigorAP Multiple Models OS Command Injection via ExportSettingsDrayTek Corporation VigorAP 903

CVE-2026-71904DrayTek VigorAP Multiple Models OS Command Injection via tr069TestInformDrayTek Corporation VigorAP 903

CVE-2026-3040DrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injectionDrayTek Vigor 300B

CVE-2025-10547CVE-2025-10547DrayTek Corporation Vigor2926

CVE-2024-12987DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injectionDrayTek Vigor300B

CVE-2024-12986DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injectionDrayTek Vigor300B

CVE-2023-6265DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversalDrayTek Vigor2960

CVE-2023-1163DrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversalDrayTek Vigor 2960

CVE-2023-1162DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injectionDrayTek Vigor 2960

CVE-2023-1009DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversalDrayTek Vigor 2960

CVE-2022-50994DrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfunction.cgiDrayTek Vigor 2960

CVE-2021-20129no title heldn/a Draytek VigorConnect

CVE-2021-20128no title heldn/a Draytek VigorConnect

CVE-2021-20127no title heldn/a Draytek VigorConnect

CVE-2021-20126no title heldn/a Draytek VigorConnect

CVE-2021-20125no title heldn/a Draytek VigorConnect

CVE-2021-20124no title heldn/a Draytek VigorConnect

CVE-2021-20123no title heldn/a Draytek VigorConnect

CVE-2020-3932Draytek VigorAP910C - Information LeakageDRAYTEK CORP. VigorAP910C

57 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.