Skip to content
OpenAdvisories

Product · DrayTek

Vigor 300B

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-3040 EPSS 10%

    DrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injection

    A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6. This affects the function cgiGetFile of the file /cgi-bin/mainfunction.cgi/uploadlangs of the component Web Management Interface. The manipulation of the argument File leads to os command inj…

    DrayTek Vigor 300B Network devices