PatchTheCVE: vigor3910 firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-41595: DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of servihttps://patchthecve.com/cve/CVE-2024-41595.htmlhttps://patchthecve.com/cve/CVE-2024-41595.htmlWed, 17 Jun 2026 07:47:53 +0000HIGH 8.0: DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via .cgi pages because of missing bounds checks on read and write operations.CVE-2024-41593: DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function fthttps://patchthecve.com/cve/CVE-2024-41593.htmlhttps://patchthecve.com/cve/CVE-2024-41593.htmlWed, 17 Jun 2026 07:47:53 +0000CRITICAL 9.8: DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.CVE-2024-41589: DrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication requests.https://patchthecve.com/cve/CVE-2024-41589.htmlhttps://patchthecve.com/cve/CVE-2024-41589.htmlWed, 17 Jun 2026 07:47:52 +0000HIGH 8.8: DrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication requests.CVE-2024-41587: Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting message in DrayThttps://patchthecve.com/cve/CVE-2024-41587.htmlhttps://patchthecve.com/cve/CVE-2024-41587.htmlWed, 17 Jun 2026 07:47:52 +0000MEDIUM 5.4: Stored XSS, by authenticated users, is caused by poor sanitization of the Login Page Greeting message in DrayTek Vigor310 devices through 4.3.2.6.CVE-2024-41586: A stack-based Buffer Overflow vulnerability in DrayTek Vigor310 devices through 4.3.2.6 allows a remote attackhttps://patchthecve.com/cve/CVE-2024-41586.htmlhttps://patchthecve.com/cve/CVE-2024-41586.htmlWed, 17 Jun 2026 07:47:52 +0000HIGH 8.0: A stack-based Buffer Overflow vulnerability in DrayTek Vigor310 devices through 4.3.2.6 allows a remote attacker to execute arbitrary code via a long query string to the cgi-bin/ipfedr.cgi component.CVE-2024-41585: DrayTek Vigor3910 devices through 4.3.2.6 are affected by an OS command injection vulnerability that allows anhttps://patchthecve.com/cve/CVE-2024-41585.htmlhttps://patchthecve.com/cve/CVE-2024-41585.htmlWed, 17 Jun 2026 07:47:51 +0000MEDIUM 6.8: DrayTek Vigor3910 devices through 4.3.2.6 are affected by an OS command injection vulnerability that allows an attacker to leverage the recvCmd binary to escape from the emulated instance and inject arbitrary commands into the host machine.CVE-2024-41584: DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by mihttps://patchthecve.com/cve/CVE-2024-41584.htmlhttps://patchthecve.com/cve/CVE-2024-41584.htmlWed, 17 Jun 2026 07:47:51 +0000MEDIUM 4.7: DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing validation of the sFormAuthStr parameter.CVE-2024-41583: DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by authenticatedhttps://patchthecve.com/cve/CVE-2024-41583.htmlhttps://patchthecve.com/cve/CVE-2024-41583.htmlWed, 17 Jun 2026 07:47:51 +0000MEDIUM 4.7: DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by authenticated users due to poor sanitization of the router name.CVE-2024-46598: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialinhttps://patchthecve.com/cve/CVE-2024-46598.htmlhttps://patchthecve.com/cve/CVE-2024-46598.htmlWed, 17 Jun 2026 07:55:35 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46597: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgihttps://patchthecve.com/cve/CVE-2024-46597.htmlhttps://patchthecve.com/cve/CVE-2024-46597.htmlWed, 17 Jun 2026 07:55:35 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46596: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgihttps://patchthecve.com/cve/CVE-2024-46596.htmlhttps://patchthecve.com/cve/CVE-2024-46596.htmlWed, 17 Jun 2026 07:55:35 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46595: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveitem parameter at lan2lan.chttps://patchthecve.com/cve/CVE-2024-46595.htmlhttps://patchthecve.com/cve/CVE-2024-46595.htmlWed, 17 Jun 2026 07:55:35 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveitem parameter at lan2lan.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46594: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2xhttps://patchthecve.com/cve/CVE-2024-46594.htmlhttps://patchthecve.com/cve/CVE-2024-46594.htmlWed, 17 Jun 2026 07:55:35 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46593: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cghttps://patchthecve.com/cve/CVE-2024-46593.htmlhttps://patchthecve.com/cve/CVE-2024-46593.htmlWed, 17 Jun 2026 07:55:35 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46592: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt_5g%d parameter at vhttps://patchthecve.com/cve/CVE-2024-46592.htmlhttps://patchthecve.com/cve/CVE-2024-46592.htmlWed, 17 Jun 2026 07:55:34 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt_5g%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46591: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgihttps://patchthecve.com/cve/CVE-2024-46591.htmlhttps://patchthecve.com/cve/CVE-2024-46591.htmlWed, 17 Jun 2026 07:55:34 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46590: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x0https://patchthecve.com/cve/CVE-2024-46590.htmlhttps://patchthecve.com/cve/CVE-2024-46590.htmlWed, 17 Jun 2026 07:55:34 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46589: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inehttps://patchthecve.com/cve/CVE-2024-46589.htmlhttps://patchthecve.com/cve/CVE-2024-46589.htmlWed, 17 Jun 2026 07:55:34 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46588: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfwhttps://patchthecve.com/cve/CVE-2024-46588.htmlhttps://patchthecve.com/cve/CVE-2024-46588.htmlWed, 17 Jun 2026 07:55:34 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at wizfw.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46586: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sCloudPass parameter at v2x00.chttps://patchthecve.com/cve/CVE-2024-46586.htmlhttps://patchthecve.com/cve/CVE-2024-46586.htmlWed, 17 Jun 2026 07:55:34 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sCloudPass parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46585: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at userghttps://patchthecve.com/cve/CVE-2024-46585.htmlhttps://patchthecve.com/cve/CVE-2024-46585.htmlWed, 17 Jun 2026 07:55:33 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at usergrp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46584: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the AControlIp1 parameter at acontrhttps://patchthecve.com/cve/CVE-2024-46584.htmlhttps://patchthecve.com/cve/CVE-2024-46584.htmlWed, 17 Jun 2026 07:55:33 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the AControlIp1 parameter at acontrol.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46583: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the extRadSrv2 parameter at cgiapp.https://patchthecve.com/cve/CVE-2024-46583.htmlhttps://patchthecve.com/cve/CVE-2024-46583.htmlWed, 17 Jun 2026 07:55:33 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the extRadSrv2 parameter at cgiapp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46582: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgihttps://patchthecve.com/cve/CVE-2024-46582.htmlhttps://patchthecve.com/cve/CVE-2024-46582.htmlWed, 17 Jun 2026 07:55:33 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46581: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cghttps://patchthecve.com/cve/CVE-2024-46581.htmlhttps://patchthecve.com/cve/CVE-2024-46581.htmlWed, 17 Jun 2026 07:55:33 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46580: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgihttps://patchthecve.com/cve/CVE-2024-46580.htmlhttps://patchthecve.com/cve/CVE-2024-46580.htmlWed, 17 Jun 2026 07:55:33 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46571: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.chttps://patchthecve.com/cve/CVE-2024-46571.htmlhttps://patchthecve.com/cve/CVE-2024-46571.htmlWed, 17 Jun 2026 07:55:33 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46568: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgihttps://patchthecve.com/cve/CVE-2024-46568.htmlhttps://patchthecve.com/cve/CVE-2024-46568.htmlWed, 17 Jun 2026 07:55:32 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46567: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.https://patchthecve.com/cve/CVE-2024-46567.htmlhttps://patchthecve.com/cve/CVE-2024-46567.htmlWed, 17 Jun 2026 07:55:32 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46566: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cghttps://patchthecve.com/cve/CVE-2024-46566.htmlhttps://patchthecve.com/cve/CVE-2024-46566.htmlWed, 17 Jun 2026 07:55:32 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46565: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.chttps://patchthecve.com/cve/CVE-2024-46565.htmlhttps://patchthecve.com/cve/CVE-2024-46565.htmlWed, 17 Jun 2026 07:55:32 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46564: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextohttps://patchthecve.com/cve/CVE-2024-46564.htmlhttps://patchthecve.com/cve/CVE-2024-46564.htmlWed, 17 Jun 2026 07:55:32 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextobj.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46561: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the queryret parameter at v2x00.cgihttps://patchthecve.com/cve/CVE-2024-46561.htmlhttps://patchthecve.com/cve/CVE-2024-46561.htmlWed, 17 Jun 2026 07:55:32 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the queryret parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46560: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pub_key parameter at v2x00.cgihttps://patchthecve.com/cve/CVE-2024-46560.htmlhttps://patchthecve.com/cve/CVE-2024-46560.htmlWed, 17 Jun 2026 07:55:31 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pub_key parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46559: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15https://patchthecve.com/cve/CVE-2024-46559.htmlhttps://patchthecve.com/cve/CVE-2024-46559.htmlWed, 17 Jun 2026 07:55:31 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46558: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.chttps://patchthecve.com/cve/CVE-2024-46558.htmlhttps://patchthecve.com/cve/CVE-2024-46558.htmlWed, 17 Jun 2026 07:55:31 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46557: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00https://patchthecve.com/cve/CVE-2024-46557.htmlhttps://patchthecve.com/cve/CVE-2024-46557.htmlWed, 17 Jun 2026 07:55:31 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46556: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sInRCSecret0 parameter at v2x00https://patchthecve.com/cve/CVE-2024-46556.htmlhttps://patchthecve.com/cve/CVE-2024-46556.htmlWed, 17 Jun 2026 07:55:31 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sInRCSecret0 parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46555: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgihttps://patchthecve.com/cve/CVE-2024-46555.htmlhttps://patchthecve.com/cve/CVE-2024-46555.htmlWed, 17 Jun 2026 07:55:31 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pb parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46554: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgihttps://patchthecve.com/cve/CVE-2024-46554.htmlhttps://patchthecve.com/cve/CVE-2024-46554.htmlWed, 17 Jun 2026 07:55:30 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46553: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.https://patchthecve.com/cve/CVE-2024-46553.htmlhttps://patchthecve.com/cve/CVE-2024-46553.htmlWed, 17 Jun 2026 07:55:30 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46552: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow parameter at ipstrhttps://patchthecve.com/cve/CVE-2024-46552.htmlhttps://patchthecve.com/cve/CVE-2024-46552.htmlWed, 17 Jun 2026 07:55:30 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow parameter at ipstrt.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46551: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_Pwd parameter at inet15.cghttps://patchthecve.com/cve/CVE-2024-46551.htmlhttps://patchthecve.com/cve/CVE-2024-46551.htmlWed, 17 Jun 2026 07:55:30 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_Pwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-46550: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chghttps://patchthecve.com/cve/CVE-2024-46550.htmlhttps://patchthecve.com/cve/CVE-2024-46550.htmlWed, 17 Jun 2026 07:55:30 +0000HIGH 7.5: Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.CVE-2024-23721: A Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 deviceshttps://patchthecve.com/cve/CVE-2024-23721.htmlhttps://patchthecve.com/cve/CVE-2024-23721.htmlWed, 17 Jun 2026 07:13:27 +0000HIGH 7.5: A Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices. When sending a certain POST request, it calls the function and exports information.