Draytek Corporation
40 CVEsCVE IDSeverityProduct / summaryPublished
CVE-2026-71904
HIGH 8.6
Vigorap 918r — Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The…
2026-08-24
CVE-2026-71905
HIGH 8.6
Vigorap 918r — Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The …
2026-08-24
CVE-2026-71906
HIGH 8.6
Vigorap 918r — Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerab…
2026-08-24
CVE-2026-71907
HIGH 8.6
Vigorap 918r — Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulne…
2026-08-24
CVE-2026-71908
HIGH 8.6
Vigorap 918r — Multiple DrayTek VigorAP models contain a command injection vulnerability in the mesh_start_speed_test functio…
2026-08-24
CVE-2026-71909
HIGH 8.6
Vigorap 918r — Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vul…
2026-08-24
CVE-2026-71910
HIGH 8.6
Vigorap 918r — Multiple DrayTek VigorAP models contain a command injection vulnerability in the apautotest function. The vuln…
2026-08-24
CVE-2026-71911
HIGH 8.6
Vigorap 918r — Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerabil…
2026-08-24
CVE-2026-71912
HIGH 8.6
Vigorap 918r — Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulner…
2026-08-24
CVE-2026-71913
HIGH 8.6
Vigorap 918r — Multiple DrayTek VigorAP models contain a command injection vulnerability in the upload_settings.cgi interface…
2026-08-24
CVE-2026-71914
CRITICAL 9.3
Vigorap 918r — Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray_apm component. The vulne…
2026-08-24
CVE-2026-71915
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the jsonstatus function. The …
2026-08-24
CVE-2026-71916
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. Th…
2026-08-24
CVE-2026-71917
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The v…
2026-08-24
CVE-2026-71918
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the webBackupAction function.…
2026-08-24
CVE-2026-71919
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the sysreboot function. The v…
2026-08-24
CVE-2026-71920
MEDIUM 6.9
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a null pointer dereference vulnerability in the formlogout functio…
2026-08-24
CVE-2026-71921
CRITICAL 9.3
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a pre-authentication command injection vulnerability in the setget…
2026-08-24
CVE-2026-71922
HIGH 8.7
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a pre-authentication null pointer dereference vulnerability in the…
2026-08-24
CVE-2026-71923
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the auth_set function. The vu…
2026-08-24
CVE-2026-71924
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getVid function. The vuln…
2026-08-24
CVE-2026-71925
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The v…
2026-08-24
CVE-2026-71926
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevice function. The v…
2026-08-24
CVE-2026-71927
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The v…
2026-08-24
CVE-2026-71928
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the fdftDevice function. The …
2026-08-24
CVE-2026-71929
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The…
2026-08-24
CVE-2026-71930
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vul…
2026-08-24
CVE-2026-71931
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the tftp_upgrade function. Th…
2026-08-24
CVE-2026-71932
MEDIUM 6.9
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function.…
2026-08-24
CVE-2026-71933
HIGH 8.8
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog function…
2026-08-24
CVE-2026-71934
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vul…
2026-08-24
CVE-2026-71935
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. T…
2026-08-24
CVE-2026-71936
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the sysreboot function. The vul…
2026-08-24
CVE-2026-71937
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poe_schedule_profile functi…
2026-08-24
CVE-2026-71938
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function. T…
2026-08-24
CVE-2026-71939
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Add ACE f…
2026-08-24
CVE-2026-71940
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl_general_setup Edit ACE …
2026-08-24
CVE-2026-71941
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diag_logmail function. The …
2026-08-24
CVE-2026-71942
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function. Th…
2026-08-24
CVE-2026-71943
HIGH 8.6
Vigorswitch G2540xs — Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The v…
2026-08-24