https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3040.htmlhttps://patchthecve.com/cve/CVE-2026-3040.htmlWed, 17 Jun 2026 10:42:55 +0000MEDIUM 4.7: A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6. This affects the function cgiGetFile of the file /cgi-bin/mainfunction.cgi/uploadlangs of the component Web Management Interface. The manipulation of the argument File leads to os command injection. The attack may be initiated remothttps://patchthecve.com/cve/CVE-2024-51139.htmlhttps://patchthecve.com/cve/CVE-2024-51139.htmlSun, 05 Jul 2026 01:21:02 +0000CRITICAL 9.8: Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 ahttps://patchthecve.com/cve/CVE-2024-51138.htmlhttps://patchthecve.com/cve/CVE-2024-51138.htmlSun, 05 Jul 2026 01:21:01 +0000CRITICAL 9.8: Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier; Vigor2135/2765/2766 4.4.5. and earlier; Vigor2865/2866/2927 4.4.5.3 and earlier; Vigor2962 4.3.2.8 and earlier; Vigor3912https://patchthecve.com/cve/CVE-2024-41340.htmlhttps://patchthecve.com/cve/CVE-2024-41340.htmlSun, 05 Jul 2026 01:20:16 +0000HIGH 8.4: An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 phttps://patchthecve.com/cve/CVE-2024-41339.htmlhttps://patchthecve.com/cve/CVE-2024-41339.htmlSun, 05 Jul 2026 01:20:15 +0000HIGH 8.8: An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2https://patchthecve.com/cve/CVE-2024-41338.htmlhttps://patchthecve.com/cve/CVE-2024-41338.htmlSun, 05 Jul 2026 01:20:15 +0000HIGH 7.5: A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3,https://patchthecve.com/cve/CVE-2024-41334.htmlhttps://patchthecve.com/cve/CVE-2024-41334.htmlSun, 05 Jul 2026 01:20:13 +0000HIGH 8.8: Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3https://patchthecve.com/cve/CVE-2024-12987.htmlhttps://patchthecve.com/cve/CVE-2024-12987.htmlWed, 17 Jun 2026 07:00:55 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injectiohttps://patchthecve.com/cve/CVE-2024-12986.htmlhttps://patchthecve.com/cve/CVE-2024-12986.htmlWed, 17 Jun 2026 07:00:55 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The manipulation of the argument session leadhttps://patchthecve.com/cve/CVE-2024-45893.htmlhttps://patchthecve.com/cve/CVE-2024-45893.htmlWed, 17 Jun 2026 07:55:02 +0000HIGH 8.0: DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `setSWMOption.`https://patchthecve.com/cve/CVE-2024-45891.htmlhttps://patchthecve.com/cve/CVE-2024-45891.htmlWed, 17 Jun 2026 07:55:01 +0000HIGH 8.0: DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `delete_wlan_profile.`https://patchthecve.com/cve/CVE-2024-45890.htmlhttps://patchthecve.com/cve/CVE-2024-45890.htmlWed, 17 Jun 2026 07:55:01 +0000HIGH 8.0: DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `download_ovpn.`https://patchthecve.com/cve/CVE-2024-45889.htmlhttps://patchthecve.com/cve/CVE-2024-45889.htmlWed, 17 Jun 2026 07:55:01 +0000HIGH 8.0: DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `commandTable.`https://patchthecve.com/cve/CVE-2024-45888.htmlhttps://patchthecve.com/cve/CVE-2024-45888.htmlWed, 17 Jun 2026 07:55:01 +0000HIGH 8.0: DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `set_ap_map_config.'https://patchthecve.com/cve/CVE-2024-45887.htmlhttps://patchthecve.com/cve/CVE-2024-45887.htmlWed, 17 Jun 2026 07:55:01 +0000HIGH 8.0: DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `doOpenVPN.`https://patchthecve.com/cve/CVE-2024-45885.htmlhttps://patchthecve.com/cve/CVE-2024-45885.htmlWed, 17 Jun 2026 07:55:01 +0000HIGH 8.0: DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `autodiscovery_clear.`https://patchthecve.com/cve/CVE-2024-45884.htmlhttps://patchthecve.com/cve/CVE-2024-45884.htmlWed, 17 Jun 2026 07:55:00 +0000HIGH 8.0: DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `setSWMGroup.`https://patchthecve.com/cve/CVE-2024-45882.htmlhttps://patchthecve.com/cve/CVE-2024-45882.htmlWed, 17 Jun 2026 07:55:00 +0000HIGH 8.0: DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `delete_map_profile.`https://patchthecve.com/cve/CVE-2024-51253.htmlhttps://patchthecve.com/cve/CVE-2024-51253.htmlWed, 17 Jun 2026 08:05:33 +0000HIGH 8.0: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doL2TP function.https://patchthecve.com/cve/CVE-2024-51251.htmlhttps://patchthecve.com/cve/CVE-2024-51251.htmlWed, 17 Jun 2026 08:05:33 +0000HIGH 8.0: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the backup function.https://patchthecve.com/cve/CVE-2024-51249.htmlhttps://patchthecve.com/cve/CVE-2024-51249.htmlWed, 17 Jun 2026 08:05:33 +0000HIGH 8.0: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function.https://patchthecve.com/cve/CVE-2024-51246.htmlhttps://patchthecve.com/cve/CVE-2024-51246.htmlWed, 17 Jun 2026 08:05:32 +0000HIGH 8.0: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doPPTP function.https://patchthecve.com/cve/CVE-2024-51252.htmlhttps://patchthecve.com/cve/CVE-2024-51252.htmlWed, 17 Jun 2026 08:05:33 +0000CRITICAL 9.8: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the restore function.https://patchthecve.com/cve/CVE-2024-51248.htmlhttps://patchthecve.com/cve/CVE-2024-51248.htmlWed, 17 Jun 2026 08:05:32 +0000HIGH 8.8: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the modifyrow function.https://patchthecve.com/cve/CVE-2024-51247.htmlhttps://patchthecve.com/cve/CVE-2024-51247.htmlWed, 17 Jun 2026 08:05:32 +0000HIGH 8.8: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doPPPo function.https://patchthecve.com/cve/CVE-2024-51245.htmlhttps://patchthecve.com/cve/CVE-2024-51245.htmlWed, 17 Jun 2026 08:05:32 +0000HIGH 8.8: In DrayTek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the rename_table function.https://patchthecve.com/cve/CVE-2024-51244.htmlhttps://patchthecve.com/cve/CVE-2024-51244.htmlWed, 17 Jun 2026 08:05:32 +0000HIGH 8.8: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doIPSec function.https://patchthecve.com/cve/CVE-2024-51260.htmlhttps://patchthecve.com/cve/CVE-2024-51260.htmlWed, 17 Jun 2026 08:05:34 +0000CRITICAL 9.8: DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the acme_process function.https://patchthecve.com/cve/CVE-2024-51255.htmlhttps://patchthecve.com/cve/CVE-2024-51255.htmlWed, 17 Jun 2026 08:05:33 +0000CRITICAL 9.8: DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ruequest_certificate function.https://patchthecve.com/cve/CVE-2024-51259.htmlhttps://patchthecve.com/cve/CVE-2024-51259.htmlWed, 17 Jun 2026 08:05:34 +0000CRITICAL 9.8: DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the setup_cacertificate function.https://patchthecve.com/cve/CVE-2024-51254.htmlhttps://patchthecve.com/cve/CVE-2024-51254.htmlWed, 17 Jun 2026 08:05:33 +0000HIGH 8.8: DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the sign_cacertificate function.https://patchthecve.com/cve/CVE-2024-51258.htmlhttps://patchthecve.com/cve/CVE-2024-51258.htmlWed, 17 Jun 2026 08:05:34 +0000HIGH 8.8: DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doSSLTunnel function.https://patchthecve.com/cve/CVE-2024-51301.htmlhttps://patchthecve.com/cve/CVE-2024-51301.htmlWed, 17 Jun 2026 08:05:35 +0000HIGH 8.8: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the packet_monitor function.https://patchthecve.com/cve/CVE-2024-51300.htmlhttps://patchthecve.com/cve/CVE-2024-51300.htmlWed, 17 Jun 2026 08:05:35 +0000HIGH 8.8: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the get_rrd function.https://patchthecve.com/cve/CVE-2024-51299.htmlhttps://patchthecve.com/cve/CVE-2024-51299.htmlWed, 17 Jun 2026 08:05:34 +0000HIGH 8.8: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the dumpSyslog function.https://patchthecve.com/cve/CVE-2024-51298.htmlhttps://patchthecve.com/cve/CVE-2024-51298.htmlWed, 17 Jun 2026 08:05:34 +0000CRITICAL 9.8: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doGRETunnel function.https://patchthecve.com/cve/CVE-2024-51296.htmlhttps://patchthecve.com/cve/CVE-2024-51296.htmlWed, 17 Jun 2026 08:05:34 +0000HIGH 8.8: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the pingtrace function.https://patchthecve.com/cve/CVE-2024-51257.htmlhttps://patchthecve.com/cve/CVE-2024-51257.htmlWed, 17 Jun 2026 08:05:33 +0000HIGH 8.8: DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doCertificate function.https://patchthecve.com/cve/CVE-2024-51304.htmlhttps://patchthecve.com/cve/CVE-2024-51304.htmlWed, 17 Jun 2026 08:05:35 +0000HIGH 8.8: In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ldap_search_dn function.https://patchthecve.com/cve/CVE-2024-48074.htmlhttps://patchthecve.com/cve/CVE-2024-48074.htmlWed, 17 Jun 2026 07:58:11 +0000HIGH 8.0: An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function.https://patchthecve.com/cve/CVE-2024-48153.htmlhttps://patchthecve.com/cve/CVE-2024-48153.htmlWed, 17 Jun 2026 07:58:14 +0000CRITICAL 9.8: DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the get_subconfig function.https://patchthecve.com/cve/CVE-2024-46316.htmlhttps://patchthecve.com/cve/CVE-2024-46316.htmlWed, 17 Jun 2026 07:55:16 +0000HIGH 8.0: DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub_2C920 function at /cgi-bin/mainfunction.cgi. This vulnerability allows attackers to execute arbitrary commands via supplying a crafted HTTP message.https://patchthecve.com/cve/CVE-2024-41596.htmlhttps://patchthecve.com/cve/CVE-2024-41596.htmlWed, 17 Jun 2026 07:47:54 +0000HIGH 8.0: Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because of improper retrieval and handling of the CGI form parameters.https://patchthecve.com/cve/CVE-2024-41595.htmlhttps://patchthecve.com/cve/CVE-2024-41595.htmlWed, 17 Jun 2026 07:47:53 +0000HIGH 8.0: DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via .cgi pages because of missing bounds checks on read and write operations.https://patchthecve.com/cve/CVE-2024-41594.htmlhttps://patchthecve.com/cve/CVE-2024-41594.htmlWed, 17 Jun 2026 07:47:53 +0000HIGH 7.5: An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the httpd server of the Vigor management UI uses a static string for seeding the PRNG of OpenSSL.https://patchthecve.com/cve/CVE-2024-41593.htmlhttps://patchthecve.com/cve/CVE-2024-41593.htmlWed, 17 Jun 2026 07:47:53 +0000CRITICAL 9.8: DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.https://patchthecve.com/cve/CVE-2024-41592.htmlhttps://patchthecve.com/cve/CVE-2024-41592.htmlWed, 17 Jun 2026 07:47:53 +0000HIGH 8.0: DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because GetCGI mishandles extraneous ampersand characters and long key-value pairs.https://patchthecve.com/cve/CVE-2024-41591.htmlhttps://patchthecve.com/cve/CVE-2024-41591.htmlWed, 17 Jun 2026 07:47:53 +0000MEDIUM 6.1: DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS.https://patchthecve.com/cve/CVE-2024-41590.htmlhttps://patchthecve.com/cve/CVE-2024-41590.htmlWed, 17 Jun 2026 07:47:52 +0000HIGH 8.0: Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strcpy function on DrayTek Vigor310 devices through 4.3.2.6.https://patchthecve.com/cve/CVE-2024-41589.htmlhttps://patchthecve.com/cve/CVE-2024-41589.htmlWed, 17 Jun 2026 07:47:52 +0000HIGH 8.8: DrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication requests.