Skip to content
OpenAdvisories

Product · DrayTek

VigorAP 903

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-71914

    DrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray_apm

    Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulnerability is caused by insufficient validation of UDP message content after START_SPEED_TEST before command execution. A remote attacker can trigger t…

    DrayTek VigorAP 903 VigorAP 918R VigorAP 1060C Network devices