Draytek Corporation Vigorap 906
7 CVEs affecting Draytek Corporation Vigorap 906. Latest disclosed: 2026-08-24. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-71914 | Critical | 9.8 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of… |
CVE-2026-71913 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface. The vulnerability is caused by insufficient fil… |
CVE-2026-71912 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during… |
CVE-2026-71911 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during mem… |
CVE-2026-71910 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vulnerability is caused by insufficient validation of… |
CVE-2026-71909 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability is caused by insufficient filtering of… |
CVE-2026-71905 | High | 7.2 | 2026-08-24 | Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering… |