Draytek Corporation
30 CVEs across 54 Draytek Corporation products. Browse Draytek Corporation vulnerabilities, severities, and proof-of-concept exploits.
Draytek Corporation products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-71943 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71942 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function. The vulnerability is caused by concatenating multip… |
CVE-2026-71941 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag_logmail function. The vulnerability is caused by concatenating multiple… |
CVE-2026-71940 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE function. The vulnerability is caused by copying… |
CVE-2026-71939 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE function. The vulnerability is caused by copying t… |
CVE-2026-71938 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function. The vulnerability is caused by unsafe copying of t… |
CVE-2026-71937 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poe_schedule_profile function. The vulnerability is caused by repeated conca… |
CVE-2026-71936 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vulnerability is caused by unsafe concatenation of s… |
CVE-2026-71935 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string con… |
CVE-2026-71934 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks whe… |
CVE-2026-71933 | Critical | 9.1 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authori… |
CVE-2026-71932 | Medium | 4.9 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient vali… |
CVE-2026-71931 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade function. The vulnerability is caused by insufficient filteri… |
CVE-2026-71930 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of… |
CVE-2026-71929 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filterin… |
CVE-2026-71928 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71927 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71926 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The vulnerability is caused by insufficient sanitizati… |
CVE-2026-71925 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71924 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getVid function. The vulnerability is caused by insufficient filtering of… |
CVE-2026-71923 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the auth_set function. The vulnerability is caused by insufficient filtering o… |
CVE-2026-71915 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the jsonstatus function. The vulnerability is caused by insufficient filtering… |
CVE-2026-71914 | Critical | 9.8 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of… |
CVE-2026-71913 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient fil… |
CVE-2026-71912 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during… |
CVE-2026-71911 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during mem… |
CVE-2026-71910 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability is caused by insufficient validation of… |
CVE-2026-71909 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability is caused by insufficient filtering of… |
CVE-2026-71905 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering… |
CVE-2025-10547 | Critical | 9.8 | 2025-10-03 | An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform R… |