{"schema_version":1,"title":"DrayTek Vigor2960 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in DrayTek Vigor2960: 0 in the last 7 days and 9 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-113397, was published on 20 October 2026. 9 vulnerabilities in the last four weeks, up from none in the four before. 3 critical against 0.","url":"https://junglewise.ai/threats/technologies/vigor2960","json_url":"https://junglewise.ai/threats/technologies/vigor2960.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/vigor2960","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":5,"all_time":9,"critical":3,"exploited":0,"last_7_days":0,"last_30_days":9,"last_90_days":9,"last_365_days":9},"latest":[{"cve":"CVE-2026-113397","cvss":7.4,"slug":"cve-2026-113397-a-security-vulnerability-has-been-detected-in-draytek-vigor2960","title":"DrayTek Vigor2960 command injection in IPsec handler","severity":"high","exploited":false,"published_at":"2026-10-20T15:17:18.337+00:00","url":"https://junglewise.ai/threats/cve-2026-113397-a-security-vulnerability-has-been-detected-in-draytek-vigor2960"},{"cve":"CVE-2026-113396","cvss":7.4,"slug":"cve-2026-113396-a-weakness-has-been-identified-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 command injection in rename table handler","severity":"high","exploited":false,"published_at":"2026-10-20T14:16:59.49+00:00","url":"https://junglewise.ai/threats/cve-2026-113396-a-weakness-has-been-identified-in-draytek-vigor2960-1-5-1-6"},{"cve":"CVE-2026-113395","cvss":7.4,"slug":"cve-2026-113395-a-security-flaw-has-been-discovered-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 path traversal in swmconfigupload","severity":"high","exploited":false,"published_at":"2026-10-20T14:16:59.32+00:00","url":"https://junglewise.ai/threats/cve-2026-113395-a-security-flaw-has-been-discovered-in-draytek-vigor2960-1-5-1-6"},{"cve":"CVE-2026-113394","cvss":7.4,"slug":"cve-2026-113394-a-vulnerability-was-identified-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 path traversal and command injection in setSWMProfile","severity":"high","exploited":false,"published_at":"2026-10-20T14:16:59.14+00:00","url":"https://junglewise.ai/threats/cve-2026-113394-a-vulnerability-was-identified-in-draytek-vigor2960-1-5-1-6"},{"cve":"CVE-2026-113393","cvss":6.3,"slug":"cve-2026-113393-a-vulnerability-was-determined-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 arbitrary file write in commonupload","severity":"medium","exploited":false,"published_at":"2026-10-20T14:16:58.95+00:00","url":"https://junglewise.ai/threats/cve-2026-113393-a-vulnerability-was-determined-in-draytek-vigor2960-1-5-1-6"},{"cve":"CVE-2026-113392","cvss":7.4,"slug":"cve-2026-113392-a-vulnerability-was-found-in-draytek-vigor2960-1-5-1-6-revision","title":"DrayTek Vigor2960 path traversal in apmupload","severity":"high","exploited":false,"published_at":"2026-10-20T13:16:40.81+00:00","url":"https://junglewise.ai/threats/cve-2026-113392-a-vulnerability-was-found-in-draytek-vigor2960-1-5-1-6-revision"},{"cve":"CVE-2026-113391","cvss":9.9,"slug":"cve-2026-113391-a-vulnerability-has-been-found-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 command injection in upload endpoints","severity":"critical","exploited":false,"published_at":"2026-10-20T13:16:40.64+00:00","url":"https://junglewise.ai/threats/cve-2026-113391-a-vulnerability-has-been-found-in-draytek-vigor2960-1-5-1-6"},{"cve":"CVE-2026-113390","cvss":9.9,"slug":"cve-2026-113390-a-flaw-has-been-found-in-draytek-vigor2960-1-5-1-6-revision-8218","title":"DrayTek Vigor2960 OS command injection in CGI interface","severity":"critical","exploited":false,"published_at":"2026-10-20T13:16:40.463+00:00","url":"https://junglewise.ai/threats/cve-2026-113390-a-flaw-has-been-found-in-draytek-vigor2960-1-5-1-6-revision-8218"},{"cve":"CVE-2026-113389","cvss":9.9,"slug":"cve-2026-113389-a-vulnerability-was-detected-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 command injection in CGI","severity":"critical","exploited":false,"published_at":"2026-10-20T12:17:29.443+00:00","url":"https://junglewise.ai/threats/cve-2026-113389-a-vulnerability-was-detected-in-draytek-vigor2960-1-5-1-6"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":3,"exploited":0,"vulnerabilities":9},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"DrayTek VigorSwitch FX2120","slug":"vigorswitch-fx2120","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-fx2120"},{"name":"DrayTek VigorSwitch G1280","slug":"vigorswitch-g1280","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g1280"},{"name":"DrayTek VigorSwitch G1282","slug":"vigorswitch-g1282","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g1282"},{"name":"DrayTek VigorSwitch G2100","slug":"vigorswitch-g2100","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2100"},{"name":"DrayTek VigorSwitch G2121","slug":"vigorswitch-g2121","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2121"},{"name":"DrayTek VigorSwitch G2280x","slug":"vigorswitch-g2280x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2280x"},{"name":"DrayTek VigorSwitch G2282x","slug":"vigorswitch-g2282x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2282x"},{"name":"DrayTek VigorSwitch G2540x","slug":"vigorswitch-g2540x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2540x"},{"name":"DrayTek VigorSwitch G2540xs","slug":"vigorswitch-g2540xs","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2540xs"},{"name":"DrayTek VigorSwitch G2542x","slug":"vigorswitch-g2542x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2542x"},{"name":"DrayTek VigorSwitch P1280","slug":"vigorswitch-p1280","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p1280"},{"name":"DrayTek VigorSwitch P1281x","slug":"vigorswitch-p1281x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p1281x"}],"technology":{"hub":true,"name":"DrayTek Vigor2960","slug":"vigor2960","vendor":{"hub":true,"name":"DrayTek","slug":"draytek","url":"https://junglewise.ai/threats/vendors/draytek"},"aliases":[],"category":"vpn router","description":"Multi-WAN router and firewall appliance with VPN and advanced networking capabilities.","url":"https://junglewise.ai/threats/technologies/vigor2960"},"most_severe":[{"cve":"CVE-2026-113391","cvss":9.9,"slug":"cve-2026-113391-a-vulnerability-has-been-found-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 command injection in upload endpoints","severity":"critical","exploited":false,"published_at":"2026-10-20T13:16:40.64+00:00","url":"https://junglewise.ai/threats/cve-2026-113391-a-vulnerability-has-been-found-in-draytek-vigor2960-1-5-1-6"},{"cve":"CVE-2026-113390","cvss":9.9,"slug":"cve-2026-113390-a-flaw-has-been-found-in-draytek-vigor2960-1-5-1-6-revision-8218","title":"DrayTek Vigor2960 OS command injection in CGI interface","severity":"critical","exploited":false,"published_at":"2026-10-20T13:16:40.463+00:00","url":"https://junglewise.ai/threats/cve-2026-113390-a-flaw-has-been-found-in-draytek-vigor2960-1-5-1-6-revision-8218"},{"cve":"CVE-2026-113389","cvss":9.9,"slug":"cve-2026-113389-a-vulnerability-was-detected-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 command injection in CGI","severity":"critical","exploited":false,"published_at":"2026-10-20T12:17:29.443+00:00","url":"https://junglewise.ai/threats/cve-2026-113389-a-vulnerability-was-detected-in-draytek-vigor2960-1-5-1-6"},{"cve":"CVE-2026-113397","cvss":7.4,"slug":"cve-2026-113397-a-security-vulnerability-has-been-detected-in-draytek-vigor2960","title":"DrayTek Vigor2960 command injection in IPsec handler","severity":"high","exploited":false,"published_at":"2026-10-20T15:17:18.337+00:00","url":"https://junglewise.ai/threats/cve-2026-113397-a-security-vulnerability-has-been-detected-in-draytek-vigor2960"},{"cve":"CVE-2026-113396","cvss":7.4,"slug":"cve-2026-113396-a-weakness-has-been-identified-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 command injection in rename table handler","severity":"high","exploited":false,"published_at":"2026-10-20T14:16:59.49+00:00","url":"https://junglewise.ai/threats/cve-2026-113396-a-weakness-has-been-identified-in-draytek-vigor2960-1-5-1-6"},{"cve":"CVE-2026-113395","cvss":7.4,"slug":"cve-2026-113395-a-security-flaw-has-been-discovered-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 path traversal in swmconfigupload","severity":"high","exploited":false,"published_at":"2026-10-20T14:16:59.32+00:00","url":"https://junglewise.ai/threats/cve-2026-113395-a-security-flaw-has-been-discovered-in-draytek-vigor2960-1-5-1-6"},{"cve":"CVE-2026-113394","cvss":7.4,"slug":"cve-2026-113394-a-vulnerability-was-identified-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 path traversal and command injection in setSWMProfile","severity":"high","exploited":false,"published_at":"2026-10-20T14:16:59.14+00:00","url":"https://junglewise.ai/threats/cve-2026-113394-a-vulnerability-was-identified-in-draytek-vigor2960-1-5-1-6"},{"cve":"CVE-2026-113392","cvss":7.4,"slug":"cve-2026-113392-a-vulnerability-was-found-in-draytek-vigor2960-1-5-1-6-revision","title":"DrayTek Vigor2960 path traversal in apmupload","severity":"high","exploited":false,"published_at":"2026-10-20T13:16:40.81+00:00","url":"https://junglewise.ai/threats/cve-2026-113392-a-vulnerability-was-found-in-draytek-vigor2960-1-5-1-6-revision"},{"cve":"CVE-2026-113393","cvss":6.3,"slug":"cve-2026-113393-a-vulnerability-was-determined-in-draytek-vigor2960-1-5-1-6","title":"DrayTek Vigor2960 arbitrary file write in commonupload","severity":"medium","exploited":false,"published_at":"2026-10-20T14:16:58.95+00:00","url":"https://junglewise.ai/threats/cve-2026-113393-a-vulnerability-was-determined-in-draytek-vigor2960-1-5-1-6"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}