Skip to content
OpenAdvisories

Vendor

DrayTek

59 known vulnerabilities.

Products

VigorSwitch G2540xs 29 VigorSwitch P2540xs 29 VigorSwitch FX2120 29 VigorSwitch G2282x 29 VigorSwitch P2282x 29 VigorSwitch Q2300x 29 VigorSwitch PQ2300xb 29 VigorSwitch G2542x 29 VigorSwitch P2542x 29 VigorSwitch P2542xh 29 VigorSwitch PX2060 29 VigorSwitch G1280 29 VigorSwitch P1280 29 VigorSwitch P1281x 29 VigorSwitch G1282 29 VigorSwitch P1282 29 VigorSwitch G2121 29 VigorSwitch P2121 29 VigorSwitch PQ2121x 29 VigorSwitch Q2121x 29 VigorSwitch G2280x 29 VigorSwitch P2280x 29 VigorSwitch Q2200x 29 VigorSwitch PQ2200xb 29 VigorSwitch G2100 29 VigorSwitch P2100 29 VigorSwitch G2540x 29 VigorSwitch P2540x 29 Vigor2960 12 VigorAP 918R 11 VigorAP 960C 11 VigorAP 1060C 11 VigorAP 906 11 VigorAP 912C 11 VigorAP 903 11 Vigor 2960 4 Vigor300B 2 Vigor 300B 1 Vigor1000B 1 Vigor2962 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-113393

    DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload

    A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component commonupload. Executing a manipulation of the argument upload_path/upload_name can lea…

    DrayTek Vigor2960 Network devices
  • Medium 4.9
    CVE-2026-71932

    DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile

    Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input conta…

    DrayTek VigorSwitch G2100 VigorSwitch P2542x VigorSwitch P2121 Network devices
  • Medium 4.9
    CVE-2026-71920

    DrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogout

    Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout function. The vulnerability is caused by missing checks for an empty or absent Cookie header before string handling. A remote attacker can trigger this vuln…

    DrayTek VigorSwitch PQ2300xb VigorSwitch Q2200x VigorSwitch P1282 Network devices
  • Medium 4.7
    CVE-2026-3040 EPSS 10%

    DrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injection

    A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6. This affects the function cgiGetFile of the file /cgi-bin/mainfunction.cgi/uploadlangs of the component Web Management Interface. The manipulation of the argument File leads to os command inj…

    DrayTek Vigor 300B Network devices
  • Medium 6.5
    CVE-2023-6265

    DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal

    ** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbit…

    DrayTek Vigor2960 Network devices
  • Medium 6.5
    CVE-2023-1163

    DrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversal

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5 and classified as critical. Affected by this vulnerability is the function getSyslogFile of the file mainfunction.cgi of the component Web Management Interfac…

    DrayTek Vigor 2960 Network devices
  • Medium 6.5
    CVE-2023-1009 EPSS 16%

    DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5. Affected is the function sub_1DF14 of the file /cgi-bin/mainfunction.cgi of the component Web Management Interface. The manipulation o…

    DrayTek Vigor 2960 Network devices