What’s Vulnerable › Products
DrayTek Vigor2960 vulnerabilities
30 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your DrayTek Vigor2960 version is affected
Exploited DrayTek Vigor2960 vulnerabilities
- CVE-2024-12987 — DrayTek Vigor Routers OS Command Injection Vulnerability
- CVE-2020-15415 — DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
- CVE-2020-8515 — Multiple DrayTek Vigor Routers Web Management Page Vulnerability
Latest DrayTek Vigor2960 vulnerabilities
- CVE-2026-113397 — DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection (CVSS 7.4)
- CVE-2026-113396 — DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection (CVSS 7.4)
- CVE-2026-113395 — DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal (CVSS 7.4)
- CVE-2026-113394 — DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal (CVSS 7.4)
- CVE-2026-113393 — DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload (CVSS 6.3)
- CVE-2026-113392 — DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal (CVSS 7.4)
- CVE-2026-113391 — DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection (CVSS 9.9)
- CVE-2026-113390 — DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection (CVSS 9.9)
- CVE-2026-113389 — DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection (CVSS 9.9)
- CVE-2024-12987 — DrayTek Vigor Routers OS Command Injection Vulnerability (CVSS 9.8) — exploited
- CVE-2024-12986 — DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection (CVSS 9.8)
- CVE-2024-48074 — (CVSS 8.0)
- CVE-2024-43027 — (CVSS 8.0)
- CVE-2023-6265 — DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal (CVSS 8.1)
- CVE-2023-24229 — (CVSS 7.8)
- CVE-2023-1009 — DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal (CVSS 5.5)
- CVE-2021-43118 — (CVSS 9.8)
- CVE-2021-42911 — (CVSS 9.8)
- CVE-2020-19664 — (CVSS 8.8)
- CVE-2020-15415 — DrayTek Multiple Vigor Routers OS Command Injection Vulnerability (CVSS 9.8) — exploited
- CVE-2020-14473 — (CVSS 9.8)
- CVE-2020-14472 — (CVSS 9.8)
- CVE-2020-14993 — (CVSS 9.8)
- CVE-2020-10828 — (CVSS 9.8)
- CVE-2020-10827 — (CVSS 9.8)