# DrayTek VigorAP 1060C vulnerabilities Source: https://junglewise.ai/threats/technologies/vigorap-1060c Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/vigorap-1060c.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 11 vulnerabilities in DrayTek VigorAP 1060C: 0 in the last 7 days and 11 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-71914, was published on 24 August 2026. Nothing was published in the last eight weeks. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 11 - All time: 11 (1 critical, 0 exploited in the wild) ## About DrayTek VigorAP 1060C DrayTek VigorAP 1060C is a WiFi 6 access point with multi-band coverage. ## Latest DrayTek VigorAP 1060C vulnerabilities - [CVE-2026-71914: DrayTek VigorAP command injection in dray_apm](https://junglewise.ai/threats/cve-2026-71914-draytek-vigorap-command-injection-in-dray-apm) (critical, CVSS 9.8, published 24 Aug 2026) - [CVE-2026-71913: DrayTek VigorAP command injection in upload_settings.cgi](https://junglewise.ai/threats/cve-2026-71913-draytek-vigorap-command-injection-in-upload-settings-cgi) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71912: DrayTek VigorAP buffer overflow in apautotest](https://junglewise.ai/threats/cve-2026-71912-draytek-vigorap-buffer-overflow-in-apautotest) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71911: DrayTek VigorAP buffer overflow in setLan function](https://junglewise.ai/threats/cve-2026-71911-draytek-vigorap-buffer-overflow-in-setlan-function) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71910: DrayTek VigorAP OS command injection in apautotest](https://junglewise.ai/threats/cve-2026-71910-draytek-vigorap-os-command-injection-in-apautotest) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71909: DrayTek VigorAP command injection in InquierTime function](https://junglewise.ai/threats/cve-2026-71909-draytek-vigorap-command-injection-in-inquiertime-function) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71908: DrayTek VigorAP command injection in mesh_start_speed_test](https://junglewise.ai/threats/cve-2026-71908-draytek-vigorap-command-injection-in-mesh-start-speed-test) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71907: DrayTek VigorAP OS command injection in setcamset](https://junglewise.ai/threats/cve-2026-71907-draytek-vigorap-os-command-injection-in-setcamset) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71906: DrayTek VigorAP OS command injection in setLan](https://junglewise.ai/threats/cve-2026-71906-draytek-vigorap-os-command-injection-in-setlan) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71905: DrayTek VigorAP command injection in ExportSettings](https://junglewise.ai/threats/cve-2026-71905-draytek-vigorap-command-injection-in-exportsettings) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71904: DrayTek VigorAP command injection in tr069TestInform](https://junglewise.ai/threats/cve-2026-71904-draytek-vigorap-command-injection-in-tr069testinform) (high, CVSS 7.2, published 24 Aug 2026) ## Most severe DrayTek VigorAP 1060C vulnerabilities - [CVE-2026-71914: DrayTek VigorAP command injection in dray_apm](https://junglewise.ai/threats/cve-2026-71914-draytek-vigorap-command-injection-in-dray-apm) (critical, CVSS 9.8, published 24 Aug 2026) - [CVE-2026-71910: DrayTek VigorAP OS command injection in apautotest](https://junglewise.ai/threats/cve-2026-71910-draytek-vigorap-os-command-injection-in-apautotest) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71909: DrayTek VigorAP command injection in InquierTime function](https://junglewise.ai/threats/cve-2026-71909-draytek-vigorap-command-injection-in-inquiertime-function) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71908: DrayTek VigorAP command injection in mesh_start_speed_test](https://junglewise.ai/threats/cve-2026-71908-draytek-vigorap-command-injection-in-mesh-start-speed-test) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71907: DrayTek VigorAP OS command injection in setcamset](https://junglewise.ai/threats/cve-2026-71907-draytek-vigorap-os-command-injection-in-setcamset) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71906: DrayTek VigorAP OS command injection in setLan](https://junglewise.ai/threats/cve-2026-71906-draytek-vigorap-os-command-injection-in-setlan) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71905: DrayTek VigorAP command injection in ExportSettings](https://junglewise.ai/threats/cve-2026-71905-draytek-vigorap-command-injection-in-exportsettings) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71913: DrayTek VigorAP command injection in upload_settings.cgi](https://junglewise.ai/threats/cve-2026-71913-draytek-vigorap-command-injection-in-upload-settings-cgi) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71904: DrayTek VigorAP command injection in tr069TestInform](https://junglewise.ai/threats/cve-2026-71904-draytek-vigorap-command-injection-in-tr069testinform) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71912: DrayTek VigorAP buffer overflow in apautotest](https://junglewise.ai/threats/cve-2026-71912-draytek-vigorap-buffer-overflow-in-apautotest) (high, CVSS 7.2, published 24 Aug 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 11 | 1 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other DrayTek technologies - [DrayTek VigorSwitch FX2120](https://junglewise.ai/threats/technologies/vigorswitch-fx2120): 29 vulnerabilities - [DrayTek VigorSwitch G1280](https://junglewise.ai/threats/technologies/vigorswitch-g1280): 29 vulnerabilities - [DrayTek VigorSwitch G1282](https://junglewise.ai/threats/technologies/vigorswitch-g1282): 29 vulnerabilities - [DrayTek VigorSwitch G2100](https://junglewise.ai/threats/technologies/vigorswitch-g2100): 29 vulnerabilities - [DrayTek VigorSwitch G2121](https://junglewise.ai/threats/technologies/vigorswitch-g2121): 29 vulnerabilities - [DrayTek VigorSwitch G2280x](https://junglewise.ai/threats/technologies/vigorswitch-g2280x): 29 vulnerabilities - [DrayTek VigorSwitch G2282x](https://junglewise.ai/threats/technologies/vigorswitch-g2282x): 29 vulnerabilities - [DrayTek VigorSwitch G2540x](https://junglewise.ai/threats/technologies/vigorswitch-g2540x): 29 vulnerabilities - [DrayTek VigorSwitch G2540xs](https://junglewise.ai/threats/technologies/vigorswitch-g2540xs): 29 vulnerabilities - [DrayTek VigorSwitch G2542x](https://junglewise.ai/threats/technologies/vigorswitch-g2542x): 29 vulnerabilities - [DrayTek VigorSwitch P1280](https://junglewise.ai/threats/technologies/vigorswitch-p1280): 29 vulnerabilities - [DrayTek VigorSwitch P1281x](https://junglewise.ai/threats/technologies/vigorswitch-p1281x): 29 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "DrayTek VigorAP 1060C vulnerabilities", https://junglewise.ai/threats/technologies/vigorap-1060c, 9 November 2026.