Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

DrayTek: actively exploited vulnerabilities

5 vulnerabilities in DrayTek products (Vigor (routers), VigorConnect) are in CISA’s catalog of exploited vulnerabilities. Last added: May 15, 2025.

DrayTek security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one DrayTek category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single DrayTek product (Vigor (routers), VigorConnect…) rather than the whole brand.

  • Vigor (routers)3 vulnerabilities, Home routers and IoT
  • VigorConnect2 vulnerabilities, Home routers and IoT

Name used by CISA: DrayTek. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this DrayTek list.

  1. Rank 1

    DrayTek Vigor (routers)CVE-2024-12987

    DrayTek Vigor Routers OS Command Injection Vulnerability

    CVSS severity 9.8critical

    Added May 15, 2025

  2. Rank 2

    DrayTek Vigor (routers)CVE-2020-15415

    DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

    CVE from 2020, added in 2024

    CVSS severity 9.8critical

    Added Sep 30, 2024

  3. Rank 3

    DrayTek Vigor (routers)CVE-2020-8515

    Multiple DrayTek Vigor Routers Web Management Page Vulnerability

    CVSS severity 9.8critical

    Added Nov 3, 2021

  4. Rank 4

    DrayTek VigorConnectCVE-2021-20123

    Draytek VigorConnect Path Traversal Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 7.5high

    Added Sep 3, 2024

  5. Rank 5

    DrayTek VigorConnectCVE-2021-20124

    Draytek VigorConnect Path Traversal Vulnerability

    CVE from 2021, added in 2024

    CVSS severity 7.5high

    Added Sep 3, 2024

Follow and verify

Get new DrayTek vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.