# DrayTek vulnerabilities Source: https://junglewise.ai/threats/vendors/draytek Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/draytek.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 55 vulnerabilities in DrayTek: 0 in the last 7 days and 49 in the last 90 days, 11 of them critical and 5 exploited in the wild. The most recent, CVE-2026-113397, was published on 20 October 2026. 9 vulnerabilities in the last four weeks, up from none in the four before. 3 critical against 0. 35 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 9 - Last 90 days: 49 - All time: 55 (11 critical, 5 exploited in the wild) ## About DrayTek A manufacturer of networking equipment including routers, firewalls, and wireless access points. ## Latest DrayTek vulnerabilities - [CVE-2026-113397: DrayTek Vigor2960 command injection in IPsec handler](https://junglewise.ai/threats/cve-2026-113397-a-security-vulnerability-has-been-detected-in-draytek-vigor2960) (high, CVSS 7.4, published 20 Oct 2026) - [CVE-2026-113396: DrayTek Vigor2960 command injection in rename table handler](https://junglewise.ai/threats/cve-2026-113396-a-weakness-has-been-identified-in-draytek-vigor2960-1-5-1-6) (high, CVSS 7.4, published 20 Oct 2026) - [CVE-2026-113395: DrayTek Vigor2960 path traversal in swmconfigupload](https://junglewise.ai/threats/cve-2026-113395-a-security-flaw-has-been-discovered-in-draytek-vigor2960-1-5-1-6) (high, CVSS 7.4, published 20 Oct 2026) - [CVE-2026-113394: DrayTek Vigor2960 path traversal and command injection in setSWMProfile](https://junglewise.ai/threats/cve-2026-113394-a-vulnerability-was-identified-in-draytek-vigor2960-1-5-1-6) (high, CVSS 7.4, published 20 Oct 2026) - [CVE-2026-113393: DrayTek Vigor2960 arbitrary file write in commonupload](https://junglewise.ai/threats/cve-2026-113393-a-vulnerability-was-determined-in-draytek-vigor2960-1-5-1-6) (medium, CVSS 6.3, published 20 Oct 2026) - [CVE-2026-113392: DrayTek Vigor2960 path traversal in apmupload](https://junglewise.ai/threats/cve-2026-113392-a-vulnerability-was-found-in-draytek-vigor2960-1-5-1-6-revision) (high, CVSS 7.4, published 20 Oct 2026) - [CVE-2026-113391: DrayTek Vigor2960 command injection in upload endpoints](https://junglewise.ai/threats/cve-2026-113391-a-vulnerability-has-been-found-in-draytek-vigor2960-1-5-1-6) (critical, CVSS 9.9, published 20 Oct 2026) - [CVE-2026-113390: DrayTek Vigor2960 OS command injection in CGI interface](https://junglewise.ai/threats/cve-2026-113390-a-flaw-has-been-found-in-draytek-vigor2960-1-5-1-6-revision-8218) (critical, CVSS 9.9, published 20 Oct 2026) - [CVE-2026-113389: DrayTek Vigor2960 command injection in CGI](https://junglewise.ai/threats/cve-2026-113389-a-vulnerability-was-detected-in-draytek-vigor2960-1-5-1-6) (critical, CVSS 9.9, published 20 Oct 2026) - [CVE-2026-71943: DrayTek VigorSwitch command injection in setDevNet](https://junglewise.ai/threats/cve-2026-71943-draytek-vigorswitch-command-injection-in-setdevnet) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71942: DrayTek VigorSwitch buffer overflow in mail_mailalert](https://junglewise.ai/threats/cve-2026-71942-draytek-vigorswitch-buffer-overflow-in-mail-mailalert) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71941: DrayTek VigorSwitch buffer overflow in diag_logmail](https://junglewise.ai/threats/cve-2026-71941-draytek-vigorswitch-buffer-overflow-in-diag-logmail) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71940: DrayTek VigorSwitch buffer overflow in acl_general_setup Edit ACE](https://junglewise.ai/threats/cve-2026-71940-draytek-vigorswitch-buffer-overflow-in-acl-general-setup-edit-ace) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71939: DrayTek VigorSwitch buffer overflow in acl_general_setup](https://junglewise.ai/threats/cve-2026-71939-draytek-vigorswitch-buffer-overflow-in-acl-general-setup) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71938: DrayTek VigorSwitch buffer overflow in switch_lan_gvrp](https://junglewise.ai/threats/cve-2026-71938-draytek-vigorswitch-buffer-overflow-in-switch-lan-gvrp) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71937: DrayTek VigorSwitch buffer overflow in poe_schedule_profile](https://junglewise.ai/threats/cve-2026-71937-draytek-vigorswitch-buffer-overflow-in-poe-schedule-profile) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71936: DrayTek VigorSwitch buffer overflow in sysreboot function](https://junglewise.ai/threats/cve-2026-71936-draytek-vigorswitch-buffer-overflow-in-sysreboot-function) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71935: DrayTek VigorSwitch buffer overflow in webBackupAction](https://junglewise.ai/threats/cve-2026-71935-draytek-vigorswitch-buffer-overflow-in-webbackupaction) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71934: DrayTek VigorSwitch buffer overflow in pingtrace](https://junglewise.ai/threats/cve-2026-71934-draytek-vigorswitch-buffer-overflow-in-pingtrace) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71933: DrayTek VigorSwitch missing authorization in syslog functions](https://junglewise.ai/threats/cve-2026-71933-draytek-vigorswitch-missing-authorization-in-syslog-functions) (critical, CVSS 9.1, published 24 Aug 2026) - [CVE-2026-71932: DrayTek VigorSwitch directory traversal in getSyslogFile](https://junglewise.ai/threats/cve-2026-71932-draytek-vigorswitch-directory-traversal-in-getsyslogfile) (medium, CVSS 4.9, published 24 Aug 2026) - [CVE-2026-71931: DrayTek VigorSwitch command injection in tftp_upgrade](https://junglewise.ai/threats/cve-2026-71931-draytek-vigorswitch-command-injection-in-tftp-upgrade) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71930: DrayTek VigorSwitch command injection in setTime function](https://junglewise.ai/threats/cve-2026-71930-draytek-vigorswitch-command-injection-in-settime-function) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71929: DrayTek VigorSwitch command injection in setDevProto](https://junglewise.ai/threats/cve-2026-71929-draytek-vigorswitch-command-injection-in-setdevproto) (high, CVSS 7.2, published 24 Aug 2026) - [CVE-2026-71928: DrayTek VigorSwitch command injection in fdftDevice](https://junglewise.ai/threats/cve-2026-71928-draytek-vigorswitch-command-injection-in-fdftdevice) (high, CVSS 7.2, published 24 Aug 2026) ## Most severe DrayTek vulnerabilities - [CVE-2024-12987: DrayTek Vigor Routers OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2024-12987-draytek-vigor-routers-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 15 May 2025) - [CVE-2020-15415: DrayTek Multiple Vigor Routers OS Command Injection Vulnerability](https://junglewise.ai/threats/cve-2020-15415-draytek-multiple-vigor-routers-os-command-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 30 Sep 2024) - [CVE-2020-8515: Multiple DrayTek Vigor Routers Web Management Page Vulnerability](https://junglewise.ai/threats/cve-2020-8515-multiple-draytek-vigor-routers-web-management-page-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 3 Nov 2021) - [CVE-2021-20124: Draytek VigorConnect Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2021-20124-draytek-vigorconnect-path-traversal-vulnerability) (critical, exploited in the wild, CVSS 7.5, published 3 Sep 2024) - [CVE-2021-20123: Draytek VigorConnect Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2021-20123-draytek-vigorconnect-path-traversal-vulnerability) (critical, exploited in the wild, CVSS 7.5, published 3 Sep 2024) - [CVE-2026-113391: DrayTek Vigor2960 command injection in upload endpoints](https://junglewise.ai/threats/cve-2026-113391-a-vulnerability-has-been-found-in-draytek-vigor2960-1-5-1-6) (critical, CVSS 9.9, published 20 Oct 2026) - [CVE-2026-113390: DrayTek Vigor2960 OS command injection in CGI interface](https://junglewise.ai/threats/cve-2026-113390-a-flaw-has-been-found-in-draytek-vigor2960-1-5-1-6-revision-8218) (critical, CVSS 9.9, published 20 Oct 2026) - [CVE-2026-113389: DrayTek Vigor2960 command injection in CGI](https://junglewise.ai/threats/cve-2026-113389-a-vulnerability-was-detected-in-draytek-vigor2960-1-5-1-6) (critical, CVSS 9.9, published 20 Oct 2026) - [CVE-2026-71921: DrayTek VigorSwitch pre-authentication command injection in setget.cgi](https://junglewise.ai/threats/cve-2026-71921-draytek-vigorswitch-pre-authentication-command-injection-in) (critical, CVSS 9.8, published 24 Aug 2026) - [CVE-2026-71914: DrayTek VigorAP command injection in dray_apm](https://junglewise.ai/threats/cve-2026-71914-draytek-vigorap-command-injection-in-dray-apm) (critical, CVSS 9.8, published 24 Aug 2026) ## Vulnerabilities per week 9 vulnerabilities in the last four weeks, up from none in the four before. 3 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 40 | 3 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 9 | 3 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## DrayTek technologies - [DrayTek VigorSwitch FX2120](https://junglewise.ai/threats/technologies/vigorswitch-fx2120): 29 vulnerabilities - [DrayTek VigorSwitch G1280](https://junglewise.ai/threats/technologies/vigorswitch-g1280): 29 vulnerabilities - [DrayTek VigorSwitch G1282](https://junglewise.ai/threats/technologies/vigorswitch-g1282): 29 vulnerabilities - [DrayTek VigorSwitch G2100](https://junglewise.ai/threats/technologies/vigorswitch-g2100): 29 vulnerabilities - [DrayTek VigorSwitch G2121](https://junglewise.ai/threats/technologies/vigorswitch-g2121): 29 vulnerabilities - [DrayTek VigorSwitch G2280x](https://junglewise.ai/threats/technologies/vigorswitch-g2280x): 29 vulnerabilities - [DrayTek VigorSwitch G2282x](https://junglewise.ai/threats/technologies/vigorswitch-g2282x): 29 vulnerabilities - [DrayTek VigorSwitch G2540x](https://junglewise.ai/threats/technologies/vigorswitch-g2540x): 29 vulnerabilities - [DrayTek VigorSwitch G2540xs](https://junglewise.ai/threats/technologies/vigorswitch-g2540xs): 29 vulnerabilities - [DrayTek VigorSwitch G2542x](https://junglewise.ai/threats/technologies/vigorswitch-g2542x): 29 vulnerabilities - [DrayTek VigorSwitch P1280](https://junglewise.ai/threats/technologies/vigorswitch-p1280): 29 vulnerabilities - [DrayTek VigorSwitch P1281x](https://junglewise.ai/threats/technologies/vigorswitch-p1281x): 29 vulnerabilities - [DrayTek VigorSwitch P1282](https://junglewise.ai/threats/technologies/vigorswitch-p1282): 29 vulnerabilities - [DrayTek VigorSwitch P2100](https://junglewise.ai/threats/technologies/vigorswitch-p2100): 29 vulnerabilities - [DrayTek VigorSwitch P2121](https://junglewise.ai/threats/technologies/vigorswitch-p2121): 29 vulnerabilities - [DrayTek VigorSwitch P2280x](https://junglewise.ai/threats/technologies/vigorswitch-p2280x): 29 vulnerabilities - [DrayTek VigorSwitch P2282x](https://junglewise.ai/threats/technologies/vigorswitch-p2282x): 29 vulnerabilities - [DrayTek VigorSwitch P2540x](https://junglewise.ai/threats/technologies/vigorswitch-p2540x): 29 vulnerabilities - [DrayTek VigorSwitch P2540xs](https://junglewise.ai/threats/technologies/vigorswitch-p2540xs): 29 vulnerabilities - [DrayTek VigorSwitch P2542x](https://junglewise.ai/threats/technologies/vigorswitch-p2542x): 29 vulnerabilities - [DrayTek VigorSwitch P2542xh](https://junglewise.ai/threats/technologies/vigorswitch-p2542xh): 29 vulnerabilities - [DrayTek VigorSwitch PQ2121x](https://junglewise.ai/threats/technologies/vigorswitch-pq2121x): 29 vulnerabilities - [DrayTek VigorSwitch PQ2200xb](https://junglewise.ai/threats/technologies/vigorswitch-pq2200xb): 29 vulnerabilities - [DrayTek VigorSwitch PQ2300xb](https://junglewise.ai/threats/technologies/vigorswitch-pq2300xb): 29 vulnerabilities - [DrayTek VigorSwitch PX2060](https://junglewise.ai/threats/technologies/vigorswitch-px2060): 29 vulnerabilities - [DrayTek VigorSwitch Q2121x](https://junglewise.ai/threats/technologies/vigorswitch-q2121x): 29 vulnerabilities - [DrayTek VigorSwitch Q2200x](https://junglewise.ai/threats/technologies/vigorswitch-q2200x): 29 vulnerabilities - [DrayTek VigorSwitch Q2300x](https://junglewise.ai/threats/technologies/vigorswitch-q2300x): 29 vulnerabilities - [DrayTek VigorAP 903](https://junglewise.ai/threats/technologies/vigorap-903): 12 vulnerabilities - [DrayTek VigorAP 912C](https://junglewise.ai/threats/technologies/vigorap-912c): 12 vulnerabilities - [DrayTek VigorAP 918R](https://junglewise.ai/threats/technologies/vigorap-918r): 12 vulnerabilities - [DrayTek VigorAP 1060C](https://junglewise.ai/threats/technologies/vigorap-1060c): 11 vulnerabilities - [DrayTek VigorAP 906](https://junglewise.ai/threats/technologies/vigorap-906): 11 vulnerabilities - [DrayTek VigorAP 960C](https://junglewise.ai/threats/technologies/vigorap-960c): 11 vulnerabilities - [DrayTek Vigor2960](https://junglewise.ai/threats/technologies/vigor2960): 9 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "DrayTek vulnerabilities", https://junglewise.ai/threats/vendors/draytek, 9 November 2026.