Login Request a demo
VI
Product
Vigor2960
by DrayTek · last CVE Oct 20, 2026
On CISA KEVExploited in the wild
30
CVEs
3
On KEV
9.9
Max CVSS
9
New 30D
Vulnerabilities30In the news0Timeline
Severity mix
Critical 18High 10Medium 2Low 0
Severity
All severities30Critical18High10Medium2Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Vigor2960 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-12987
In wildKEV
9.8
98%
Dec 27
DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
Affected: 1.5.1.4
CVE-2020-15415
In wildKEV
9.8
84%
Jun 30
DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
Affected: before 1.5.1
CVE-2020-8515
In wildKEV
9.8
100%
Feb 1
Multiple DrayTek Vigor Routers Web Management Page Vulnerability
Affected: 1.3.1
CVE-2026-113391
9.9
2%
Oct 20
DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection
Affected: 1.5.1.6 Revision 8218
CVE-2026-113390
9.9
2%
Oct 20
DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection
Affected: 1.5.1.6 Revision 8218
CVE-2026-113389
9.9
2%
Oct 20
DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection
Affected: 1.5.1.6 Revision 8218
CVE-2024-12986
9.8
35%
Dec 27
DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection
Affected: 1.5.1.3 before 1.5.1.5
CVE-2021-43118
9.8
35%
Mar 29
A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 via a crafted HTTP message containing…
Affected: 1.5.1.3
CVE-2021-42911
9.8
4%
Mar 29
A Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5.1.3, and DrayTek Vigor 300B <= 1.5.1.3 in the mainfunction.cgi file via a crafted…
Affected: through 1.5.1.3
CVE-2020-14473
9.8
2%
Jun 24
Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1
Affected: before 1.5.1.1
CVE-2020-14472
9.8
3%
Jun 24
On Draytek Vigor3900, Vigor2960, and Vigor 300B devices before 1.5.1.1, there are some command-injection vulnerabilities in the mainfunction.cgi file
Affected: before 1.5.1.1
CVE-2020-14993
9.8
6%
Jun 23
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber…
Affected: before 1.5.1.1
CVE-2020-10828
9.8
21%
Mar 26
A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP…
Affected: before 1.5.1
CVE-2020-10827
9.8
21%
Mar 26
A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP…
Affected: before 1.5.1
CVE-2020-10826
9.8
39%
Mar 26
/cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injection via a remote HTTP request in DEBUG…
Affected: before 1.5.1
CVE-2020-10825
9.8
4%
Mar 26
A stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote…
Affected: before 1.5.1
CVE-2020-10824
9.8
4%
Mar 26
A stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to…
Affected: before 1.5.1
CVE-2020-10823
9.8
4%
Mar 26
A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve…
Affected: before 1.5.1
CVE-2020-19664
8.8
6%
Dec 31
DrayTek Vigor2960 1.5.1 allows remote command execution via shell metacharacters in a toLogin2FA action to mainfunction.cgi
Affected: through 1.5.1
CVE-2023-6265
8.1
2%
Nov 22
** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an…
Affected: 1.5.1.4; 1.5.1.5
CVE-2024-48074
8.0
1%
Oct 28
An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE…
Affected: 1.4.4
CVE-2024-43027
8.0
1%
Aug 21
DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection…
Affected: before 1.5.1.5
CVE-2023-24229
7.8
7%
Mar 15
DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi…
Affected: 1.5.1.4
CVE-2026-113397
7.4
1%
Oct 20
DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection
Affected: 1.5.1.6 Revision 8218
CVE-2026-113396
7.4
2%
Oct 20
DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection
Affected: 1.5.1.6 Revision 8218
CVE-2026-113395
7.4
0%
Oct 20
DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal
Affected: 1.5.1.6 Revision 8218
CVE-2026-113394
7.4
0%
Oct 20
DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal
Affected: 1.5.1.6 Revision 8218
CVE-2026-113392
7.4
0%
Oct 20
DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal
Affected: 1.5.1.6 Revision 8218
CVE-2026-113393
6.3
0%
Oct 20
DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload
Affected: 1.5.1.6 Revision 8218
CVE-2023-1009
5.5
16%
Feb 24
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5
Affected: 1.5.1.4
Showing 30