DDrayTek

Products

Exploited and recent CVEs

• CVE-2024-12987 High 7.3 Exploited DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection 98.2%
• CVE-2024-12987 High 7.3 Exploited DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection 98.2%
• CVE-2026-113397 High 7.4 DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection 1.0%
• CVE-2026-113396 High 7.4 DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection 1.6%
• CVE-2026-113395 High 7.4 DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal 0.4%
• CVE-2026-113394 High 7.4 DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal 0.4%
• CVE-2026-113393 Medium 6.3 DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload 0.3%
• CVE-2026-113392 High 7.4 DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal 0.4%
• CVE-2026-113391 Critical 9.9 DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection 2.1%
• CVE-2026-113390 Critical 9.9 DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection 1.9%
• CVE-2026-113389 Critical 9.9 DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection 1.9%
• CVE-2022-50994 High 8.1 DrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfunction.cgi 1.4%
• CVE-2026-3040 Medium 4.7 DrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injection 10.1%
• CVE-2024-12986 High 7.3 DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection 35.3%
• CVE-2024-12986 High 7.3 DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection 35.3%
• CVE-2023-6265 Medium 6.5 DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal 1.8%
• CVE-2023-1163 Medium 6.5 DrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversal 1.8%
• CVE-2023-1162 High 7.2 DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection 26.0%
• CVE-2023-1009 Medium 6.5 DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal 15.7%