Vulnerabilities

Filters

1 selected

11 records

Sort

Advisory: DrayTek VigorAP 1060C, VigorAP 903 and 4 more products — draytek.com/about/security-advisory/multiple-remote-code-ex… Clear all filters

TI-2026-50209 CVE-2026-71914 · GHSA-q93r-mff6-h5vp

DrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray_apm

MEDIUM 53

Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02563 Published 2026-08-24 Fixed in 1.4.11, 1.4.12 +3 CWE-78

TI-2026-50208 CVE-2026-71913 · GHSA-gc54-hr7f-cpjx

DrayTek VigorAP Multiple Models OS Command Injection via upload_settings.cgi

MEDIUM 43

Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01783 Published 2026-08-24 Fixed in 1.4.11, 1.4.12 +3 CWE-78

TI-2026-50207 CVE-2026-71912 · GHSA-79qv-wp74-hqv7

DrayTek VigorAP Multiple Models Buffer Overflow via apautotest

MEDIUM 40

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00683 Published 2026-08-24 Fixed in 1.4.11, 1.4.12 +3 CWE-120

TI-2026-50206 CVE-2026-71911 · GHSA-79vq-rxp3-f6f5

DrayTek VigorAP Multiple Models Buffer Overflow via setLan

MEDIUM 40

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00683 Published 2026-08-24 Fixed in 1.4.11, 1.4.12 +3 CWE-120

TI-2026-50205 CVE-2026-71910 · GHSA-xr2j-48r6-m6cc

DrayTek VigorAP Multiple Models OS Command Injection via apautotest

MEDIUM 44

Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.02265 Published 2026-08-24 Fixed in 1.4.11, 1.4.12 +3 CWE-78

TI-2026-50204 CVE-2026-71909 · GHSA-r6p3-5h4g-hpqf

DrayTek VigorAP Multiple Models OS Command Injection via InquierTime

MEDIUM 44

Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.02265 Published 2026-08-24 Fixed in 1.4.11, 1.4.12 +3 CWE-78

TI-2026-50203 CVE-2026-71908 · GHSA-693m-44xg-3w8f

DrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_test

MEDIUM 44

Multiple DrayTek VigorAP models contain a command injection vulnerability in the mesh_start_speed_test function.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.02265 Published 2026-08-24 Fixed in 1.4.11, 1.4.12 +3 CWE-78

TI-2026-50202 CVE-2026-71907 · GHSA-c53r-vvg8-2mmp

DrayTek VigorAP Multiple Models OS Command Injection via setcamset

MEDIUM 44

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.02265 Published 2026-08-24 Fixed in 1.4.11, 1.4.12 +3 CWE-78

TI-2026-50201 CVE-2026-71906 · GHSA-7cm6-3cpw-ff58

DrayTek VigorAP Multiple Models OS Command Injection via setLan

MEDIUM 44

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.02265 Published 2026-08-24 Fixed in 1.4.11, 1.4.12 +3 CWE-78

TI-2026-50200 CVE-2026-71905 · GHSA-8x6f-m45x-3rjp

DrayTek VigorAP Multiple Models OS Command Injection via ExportSettings

MEDIUM 44

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.02265 Published 2026-08-24 Fixed in 1.4.11, 1.4.12 +3 CWE-78

TI-2026-50199 CVE-2026-71904 · GHSA-7378-7886-rhmg

DrayTek VigorAP Multiple Models OS Command Injection via tr069TestInform

MEDIUM 43

Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01783 Published 2026-08-24 Fixed in 1.4.11, 1.4.12 +3 CWE-78