TI-2026-76874 CVE-2026-113397 · GHSA-4232-cr6c-m4cv
Command injection in DrayTek Vigor2960 IPsec certificate request
Priority MEDIUM 57
A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218.
Vulnerabilities
185 records
TI-2026-76873 CVE-2026-113396 · GHSA-r9v6-xv95-6v78
Command injection in DrayTek Vigor2960 Rename Table handler
Priority MEDIUM 57
A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218.
TI-2026-76872 CVE-2026-113395 · GHSA-jrpm-fx68-c8j4
Path traversal in DrayTek Vigor2960 swmconfigupload cgiEscape
Priority MEDIUM 57
A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218.
TI-2026-76871 CVE-2026-113394 · GHSA-rwp2-x553-jxr9
Path traversal in DrayTek Vigor2960 mainfunction.cgi setSWMProfile
Priority MEDIUM 57
A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218.
TI-2026-76870 CVE-2026-113393 · GHSA-hghw-mj7p-r942
Unrestricted file upload in DrayTek Vigor2960 commonupload function
Priority MEDIUM 57
A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218.
TI-2026-76869 CVE-2026-113392 · GHSA-3r48-3g8f-54w9
Path traversal in DrayTek Vigor2960 Apmupload mainfunction.cgi
Priority MEDIUM 57
A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218.
TI-2026-76868 CVE-2026-113391 · GHSA-f3vf-pm24-g43p
Command injection in DrayTek Vigor2960 upload endpoint
Priority HIGH 76
A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218.
TI-2026-76867 CVE-2026-113390 · GHSA-r5pp-rj98-9f7m
OS command injection in DrayTek Vigor2960 mainfunction.cgi
Priority HIGH 76
A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218.
TI-2026-76821 CVE-2026-113389 · GHSA-93hq-w565-c2gv
Command injection in DrayTek Vigor2960 CGI process via set_table
Priority HIGH 76
A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218.
TI-2026-50238 CVE-2026-71943 · GHSA-hpmr-74gj-7m6c
DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNet
Priority MEDIUM 44
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function.
TI-2026-50237 CVE-2026-71942 · GHSA-33fw-8wrj-c6pw
DrayTek VigorSwitch Multiple Models Buffer Overflow via mail_mailalert
Priority MEDIUM 40
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function.
TI-2026-50236 CVE-2026-71941 · GHSA-2wrc-f39g-cp5h
DrayTek VigorSwitch Multiple Models Buffer Overflow via diag_logmail
Priority MEDIUM 40
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag_logmail function.
TI-2026-50235 CVE-2026-71940 · GHSA-pfv2-vr3v-8f3r
DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Edit ACE
Priority MEDIUM 40
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE function.
TI-2026-50234 CVE-2026-71939 · GHSA-w265-5q4m-22wq
DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACE
Priority MEDIUM 40
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE function.
TI-2026-50233 CVE-2026-71938 · GHSA-x775-m3v2-h228
DrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrp
Priority MEDIUM 40
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function.
TI-2026-50232 CVE-2026-71937 · GHSA-75q7-4wfq-wpxr
DrayTek VigorSwitch Multiple Models Buffer Overflow via poe_schedule_profile
Priority MEDIUM 40
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poe_schedule_profile function.
TI-2026-50231 CVE-2026-71936 · GHSA-v8w8-j3hm-5q73
DrayTek VigorSwitch Multiple Models Buffer Overflow via sysreboot
Priority MEDIUM 40
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function.
TI-2026-50230 CVE-2026-71935 · GHSA-hc7m-6wqp-3xx8
DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction
Priority MEDIUM 40
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function.
TI-2026-50229 CVE-2026-71934 · GHSA-6w7v-x68g-7x9r
DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace
Priority MEDIUM 40
Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function.
TI-2026-50228 CVE-2026-71933 · GHSA-x2c7-pf46-x3p9
DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions
Priority MEDIUM 47
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions.
TI-2026-50227 CVE-2026-71932 · GHSA-r5v5-f3wg-hpww
DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile
Priority LOW 32
Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function.
TI-2026-50226 CVE-2026-71931 · GHSA-cppc-jg2v-27ff
DrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgrade
Priority MEDIUM 43
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade function.
TI-2026-50225 CVE-2026-71930 · GHSA-jppm-3g4f-r3x7
DrayTek VigorSwitch Multiple Models OS Command Injection via setTime
Priority MEDIUM 44
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function.
TI-2026-50224 CVE-2026-71929 · GHSA-p299-wp3x-668q
DrayTek VigorSwitch Multiple Models OS Command Injection via setDevProto
Priority MEDIUM 44
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function.
TI-2026-50223 CVE-2026-71928 · GHSA-q8x9-vhc2-6p4c
DrayTek VigorSwitch Multiple Models OS Command Injection via fdftDevice
Priority MEDIUM 44
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function.