Browse all 7 CVE security advisories affecting DrayTek. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-3040 | DrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injection — Vigor 300BCWE-78 | 4.7 | Medium | 2026-02-23 |
| CVE-2024-12987 | DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection — Vigor2960CWE-78 | 7.3 | High | 2024-12-27 |
| CVE-2024-12986 | DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection — Vigor2960CWE-78 | 7.3 | High | 2024-12-27 |
| CVE-2023-6265 | DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal — Vigor2960CWE-22 | 6.5 | Medium | 2023-11-22 |
| CVE-2023-1163 | DrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversal — Vigor 2960CWE-22 | 6.5 | Medium | 2023-03-03 |
| CVE-2023-1162 | DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection — Vigor 2960CWE-77 | 7.2 | High | 2023-03-03 |
| CVE-2023-1009 | DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal — Vigor 2960CWE-22 | 6.5 | Medium | 2023-02-24 |
This page lists every published CVE security advisory associated with DrayTek. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.