{"schema_version":1,"title":"DrayTek VigorAP 903 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 12 vulnerabilities in DrayTek VigorAP 903: 0 in the last 7 days and 11 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-71914, was published on 24 August 2026.","url":"https://junglewise.ai/threats/technologies/vigorap-903","json_url":"https://junglewise.ai/threats/technologies/vigorap-903.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/vigorap-903","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":11,"all_time":12,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":11,"last_365_days":11},"latest":[{"cve":"CVE-2026-71914","cvss":9.8,"epss":0.0256,"slug":"cve-2026-71914-draytek-vigorap-command-injection-in-dray-apm","title":"DrayTek VigorAP command injection in dray_apm","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:03.497+00:00","url":"https://junglewise.ai/threats/cve-2026-71914-draytek-vigorap-command-injection-in-dray-apm"},{"cve":"CVE-2026-71913","cvss":7.2,"epss":0.0178,"slug":"cve-2026-71913-draytek-vigorap-command-injection-in-upload-settings-cgi","title":"DrayTek VigorAP command injection in upload_settings.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:03.3+00:00","url":"https://junglewise.ai/threats/cve-2026-71913-draytek-vigorap-command-injection-in-upload-settings-cgi"},{"cve":"CVE-2026-71912","cvss":7.2,"epss":0.0068,"slug":"cve-2026-71912-draytek-vigorap-buffer-overflow-in-apautotest","title":"DrayTek VigorAP buffer overflow in apautotest","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:03.11+00:00","url":"https://junglewise.ai/threats/cve-2026-71912-draytek-vigorap-buffer-overflow-in-apautotest"},{"cve":"CVE-2026-71911","cvss":7.2,"epss":0.0068,"slug":"cve-2026-71911-draytek-vigorap-buffer-overflow-in-setlan-function","title":"DrayTek VigorAP buffer overflow in setLan function","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:02.947+00:00","url":"https://junglewise.ai/threats/cve-2026-71911-draytek-vigorap-buffer-overflow-in-setlan-function"},{"cve":"CVE-2026-71910","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71910-draytek-vigorap-os-command-injection-in-apautotest","title":"DrayTek VigorAP OS command injection in apautotest","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:02.77+00:00","url":"https://junglewise.ai/threats/cve-2026-71910-draytek-vigorap-os-command-injection-in-apautotest"},{"cve":"CVE-2026-71909","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71909-draytek-vigorap-command-injection-in-inquiertime-function","title":"DrayTek VigorAP command injection in InquierTime function","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:02.593+00:00","url":"https://junglewise.ai/threats/cve-2026-71909-draytek-vigorap-command-injection-in-inquiertime-function"},{"cve":"CVE-2026-71908","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71908-draytek-vigorap-command-injection-in-mesh-start-speed-test","title":"DrayTek VigorAP command injection in mesh_start_speed_test","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:02.42+00:00","url":"https://junglewise.ai/threats/cve-2026-71908-draytek-vigorap-command-injection-in-mesh-start-speed-test"},{"cve":"CVE-2026-71907","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71907-draytek-vigorap-os-command-injection-in-setcamset","title":"DrayTek VigorAP OS command injection in setcamset","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:02.243+00:00","url":"https://junglewise.ai/threats/cve-2026-71907-draytek-vigorap-os-command-injection-in-setcamset"},{"cve":"CVE-2026-71906","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71906-draytek-vigorap-os-command-injection-in-setlan","title":"DrayTek VigorAP OS command injection in setLan","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:02.067+00:00","url":"https://junglewise.ai/threats/cve-2026-71906-draytek-vigorap-os-command-injection-in-setlan"},{"cve":"CVE-2026-71905","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71905-draytek-vigorap-command-injection-in-exportsettings","title":"DrayTek VigorAP command injection in ExportSettings","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:01.89+00:00","url":"https://junglewise.ai/threats/cve-2026-71905-draytek-vigorap-command-injection-in-exportsettings"},{"cve":"CVE-2026-71904","cvss":7.2,"epss":0.0178,"slug":"cve-2026-71904-draytek-vigorap-command-injection-in-tr069testinform","title":"DrayTek VigorAP command injection in tr069TestInform","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:01.7+00:00","url":"https://junglewise.ai/threats/cve-2026-71904-draytek-vigorap-command-injection-in-tr069testinform"},{"cve":"CVE-2025-44643","cvss":8.6,"epss":0.0025,"slug":"cve-2025-44643-draytek-vigorap-hardcoded-weak-password-in-ripd-conf","title":"DrayTek VigorAP hardcoded weak password in ripd.conf","severity":"high","exploited":false,"published_at":"2025-08-04T15:15:32.197+00:00","url":"https://junglewise.ai/threats/cve-2025-44643-draytek-vigorap-hardcoded-weak-password-in-ripd-conf"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":1,"exploited":0,"vulnerabilities":11},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"DrayTek VigorSwitch FX2120","slug":"vigorswitch-fx2120","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-fx2120"},{"name":"DrayTek VigorSwitch G1280","slug":"vigorswitch-g1280","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g1280"},{"name":"DrayTek VigorSwitch G1282","slug":"vigorswitch-g1282","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g1282"},{"name":"DrayTek VigorSwitch G2100","slug":"vigorswitch-g2100","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2100"},{"name":"DrayTek VigorSwitch G2121","slug":"vigorswitch-g2121","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2121"},{"name":"DrayTek VigorSwitch G2280x","slug":"vigorswitch-g2280x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2280x"},{"name":"DrayTek VigorSwitch G2282x","slug":"vigorswitch-g2282x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2282x"},{"name":"DrayTek VigorSwitch G2540x","slug":"vigorswitch-g2540x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2540x"},{"name":"DrayTek VigorSwitch G2540xs","slug":"vigorswitch-g2540xs","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2540xs"},{"name":"DrayTek VigorSwitch G2542x","slug":"vigorswitch-g2542x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-g2542x"},{"name":"DrayTek VigorSwitch P1280","slug":"vigorswitch-p1280","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p1280"},{"name":"DrayTek VigorSwitch P1281x","slug":"vigorswitch-p1281x","vulnerabilities":29,"url":"https://junglewise.ai/threats/technologies/vigorswitch-p1281x"}],"technology":{"hub":true,"name":"DrayTek VigorAP 903","slug":"vigorap-903","vendor":{"name":"DrayTek","slug":"draytek","url":"https://junglewise.ai/threats/vendors/draytek"},"aliases":[],"category":"firmware","homepage":"https://www.draytek.com/products/vigorap-903/","repo_url":"https://www.draytek.com/products/vigorap-903/","description":"VigorAP 903 is firmware for DrayTek wireless access points.","url":"https://junglewise.ai/threats/technologies/vigorap-903"},"most_severe":[{"cve":"CVE-2026-71914","cvss":9.8,"epss":0.0256,"slug":"cve-2026-71914-draytek-vigorap-command-injection-in-dray-apm","title":"DrayTek VigorAP command injection in dray_apm","severity":"critical","exploited":false,"published_at":"2026-08-24T18:17:03.497+00:00","url":"https://junglewise.ai/threats/cve-2026-71914-draytek-vigorap-command-injection-in-dray-apm"},{"cve":"CVE-2025-44643","cvss":8.6,"epss":0.0025,"slug":"cve-2025-44643-draytek-vigorap-hardcoded-weak-password-in-ripd-conf","title":"DrayTek VigorAP hardcoded weak password in ripd.conf","severity":"high","exploited":false,"published_at":"2025-08-04T15:15:32.197+00:00","url":"https://junglewise.ai/threats/cve-2025-44643-draytek-vigorap-hardcoded-weak-password-in-ripd-conf"},{"cve":"CVE-2026-71910","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71910-draytek-vigorap-os-command-injection-in-apautotest","title":"DrayTek VigorAP OS command injection in apautotest","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:02.77+00:00","url":"https://junglewise.ai/threats/cve-2026-71910-draytek-vigorap-os-command-injection-in-apautotest"},{"cve":"CVE-2026-71909","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71909-draytek-vigorap-command-injection-in-inquiertime-function","title":"DrayTek VigorAP command injection in InquierTime function","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:02.593+00:00","url":"https://junglewise.ai/threats/cve-2026-71909-draytek-vigorap-command-injection-in-inquiertime-function"},{"cve":"CVE-2026-71908","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71908-draytek-vigorap-command-injection-in-mesh-start-speed-test","title":"DrayTek VigorAP command injection in mesh_start_speed_test","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:02.42+00:00","url":"https://junglewise.ai/threats/cve-2026-71908-draytek-vigorap-command-injection-in-mesh-start-speed-test"},{"cve":"CVE-2026-71907","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71907-draytek-vigorap-os-command-injection-in-setcamset","title":"DrayTek VigorAP OS command injection in setcamset","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:02.243+00:00","url":"https://junglewise.ai/threats/cve-2026-71907-draytek-vigorap-os-command-injection-in-setcamset"},{"cve":"CVE-2026-71906","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71906-draytek-vigorap-os-command-injection-in-setlan","title":"DrayTek VigorAP OS command injection in setLan","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:02.067+00:00","url":"https://junglewise.ai/threats/cve-2026-71906-draytek-vigorap-os-command-injection-in-setlan"},{"cve":"CVE-2026-71905","cvss":7.2,"epss":0.0227,"slug":"cve-2026-71905-draytek-vigorap-command-injection-in-exportsettings","title":"DrayTek VigorAP command injection in ExportSettings","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:01.89+00:00","url":"https://junglewise.ai/threats/cve-2026-71905-draytek-vigorap-command-injection-in-exportsettings"},{"cve":"CVE-2026-71913","cvss":7.2,"epss":0.0178,"slug":"cve-2026-71913-draytek-vigorap-command-injection-in-upload-settings-cgi","title":"DrayTek VigorAP command injection in upload_settings.cgi","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:03.3+00:00","url":"https://junglewise.ai/threats/cve-2026-71913-draytek-vigorap-command-injection-in-upload-settings-cgi"},{"cve":"CVE-2026-71904","cvss":7.2,"epss":0.0178,"slug":"cve-2026-71904-draytek-vigorap-command-injection-in-tr069testinform","title":"DrayTek VigorAP command injection in tr069TestInform","severity":"high","exploited":false,"published_at":"2026-08-24T18:17:01.7+00:00","url":"https://junglewise.ai/threats/cve-2026-71904-draytek-vigorap-command-injection-in-tr069testinform"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}