Product by DrayTek
DrayTek Vigor2960
12 known vulnerabilities in DrayTek Vigor2960 (DrayTek), 1 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-12987 | DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection In CISA KEValso in 2 other products | 7.3 | |
| Critical | CVE-2026-113391 | DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection | 9.9 | |
| Critical | CVE-2026-113389 | DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection | 9.9 | |
| Critical | CVE-2026-113390 | DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection | 9.9 | |
| Critical | CVE-2024-12986 | DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupptim os command injection | 7.3 | |
| High | CVE-2026-113396 | DrayTek Vigor2960 Rename Table mainfunction.cgi rename_table command injection | 7.4 | |
| High | CVE-2026-113397 | DrayTek Vigor2960 IPsec mainfunction.cgi ruequest_certificate command injection | 7.4 | |
| High | CVE-2023-6265 | DrayTek Vigor2960 mainfunction.cgi dumpSyslog 'option' directory traversal | 6.5 | |
| High | CVE-2026-113395 | DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal | 7.4 | |
| High | CVE-2026-113392 | DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal | 7.4 | |
| High | CVE-2026-113394 | DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal | 7.4 | |
| Medium | CVE-2026-113393 | DrayTek Vigor2960 commonupload mainfunction.cgi unrestricted upload | 6.3 |