DrayTek Vigor2960

• CVE-2024-12987 High 7.3 Exploited DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection 98.2%
• CVE-2026-113397 High 7.4 DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection 1.0%
• CVE-2026-113396 High 7.4 DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection 1.6%
• CVE-2026-113395 High 7.4 DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal 0.4%
• CVE-2026-113394 High 7.4 DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal 0.4%
• CVE-2026-113393 Medium 6.3 DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload 0.3%
• CVE-2026-113392 High 7.4 DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal 0.4%
• CVE-2026-113391 Critical 9.9 DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection 2.1%
• CVE-2026-113390 Critical 9.9 DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection 1.9%
• CVE-2026-113389 Critical 9.9 DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection 1.9%
• CVE-2024-12986 High 7.3 DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection 35.3%
• CVE-2023-6265 Medium 6.5 DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal 1.8%