Known Vulnerabilities for products from DrayTek
Listed below are 20 of the newest known vulnerabilities associated with the vendor "DrayTek".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by DrayTek can be found at device.report : DrayTek
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-3040 json | A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6. This affects the function cgiGetFile of the file /cgi-bin... | Not Provided | 2026-02-23 | 2026-04-29 |
| CVE-2025-44643 json | Not Provided | 2025-08-04 | 2026-07-05 | |
| CVE-2024-51139 json | Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926... | Not Provided | 2025-02-27 | 2026-07-05 |
| CVE-2024-51138 json | Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.... | Not Provided | 2025-02-27 | 2026-07-05 |
| CVE-2024-41340 json | An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.... | Not Provided | 2025-02-27 | 2026-07-05 |
| CVE-2024-41339 json | An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE2... | Not Provided | 2025-02-27 | 2026-07-05 |
| CVE-2024-41338 json | Not Provided | 2025-02-27 | 2026-07-05 | |
| CVE-2024-41336 json | Not Provided | 2025-02-27 | 2026-07-05 | |
| CVE-2024-41335 json | Not Provided | 2025-02-27 | 2026-07-05 | |
| CVE-2024-41334 json | Not Provided | 2025-02-27 | 2026-07-05 | |
| CVE-2023-33778 json | Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware ve... | 9.8 - CRITICAL | 2023-06-01 | 2023-06-09 |
| CVE-2023-31447 json | user_login.cgi on Draytek Vigor2620 devices before 3.9.8.4 (and on all versions of Vigor2925 devices) allows attackers to sen... | 9.8 - CRITICAL | 2023-08-21 | 2023-08-30 |
| CVE-2023-24229 json | DrayTek Vigor2960 v1.5.1.4 was discovered to contain a command injection vulnerability via the mainfunction.cgi component. | 7.8 - HIGH | 2023-03-15 | 2023-11-22 |
| CVE-2023-23313 json | Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of ... | 6.1 - MEDIUM | 2023-03-03 | 2023-11-07 |
| CVE-2023-6265 json | Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of ... | 8.1 - HIGH | 2023-11-22 | 2023-11-30 |
| CVE-2023-1163 json | A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4 and classified as problematic. Affected by this vulnerability is... | 6.5 - MEDIUM | 2023-03-03 | 2023-11-22 |
| CVE-2023-1162 json | A vulnerability, which was classified as critical, was found in DrayTek Vigor 2960 1.5.1.4. Affected is the function sub_1225... | 8.8 - HIGH | 2023-03-03 | 2023-11-22 |
| CVE-2023-1009 json | A vulnerability classified as problematic has been found in DrayTek Vigor 2960 1.5.1.4. Affected is the function sub_1DF14 of... | 5.5 - MEDIUM | 2023-02-24 | 2023-11-22 |
| CVE-2022-50994 json | Not Provided | 2026-05-08 | 2026-05-08 | |
| CVE-2022-32548 json | An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlog... | 9.8 - CRITICAL | 2022-08-29 | 2022-09-01 |
Known software with vulnerabilities from DrayTek
| Type | Vendor | Product | Version |
|---|---|---|---|
| Hardware | Draytek | Vigor2925ac | - |
| Hardware | Draytek | Vigor2925fn | - |
| Hardware | Draytek | Vigor2925n-plus | - |
| Hardware | Draytek | Vigor2925vac | - |
| Hardware | Draytek | Vigor2925vn-plus | - |
| Hardware | Draytek | Vigor2960 | - |
| Operating System | Draytek | Vigor2960 Firmware | - |
| Hardware | Draytek | Vigor300b | - |
| Operating System | Draytek | Vigor300b Firmware | - |
| Hardware | Draytek | Vigor3900 | - |
| Operating System | Draytek | Vigor3900 Firmware | - |
| Operating System | Draytek | Vigorap 910c Firmware | 1.3.1 |
| Hardware | Draytek | Vigor 2700 Router | - |
| Operating System | Draytek | Vigor 2700 Router Firmware | 2.8.3 |
| Hardware | Draytek | Vigor 2925 | - |
| Hardware | Draytek | Vigor 2925n | - |
| Operating System | Draytek | Vigor 2925 Firmware | 3.8.4.3 |