Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2619▼ 461 respecto a la semana anterior
Críticas / altas1277▼ 72 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)235▼ 274 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.00% | — | Draytek Vigor2620 FirmwareDraytek Vigorlte200 FirmwareDraytek Vigor2860 FirmwareDraytek Vigor2925 Firmware+19 | 27/2/2025 | 5/7/2026 | Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862/2926 3.9.9.5 and earlier and Vigor2133/2762/2832 3.9.9 and earlier and Vigor165/166 4.2.7 and earlier and Vigor2135/2765/2766 4.4.5.1 and earlier and Vigor2865/2866/2927 4.4.5.3 and earlier and… | |
| Modificada | Crítica (9.8) | 1.1% | — | Draytek Vigor3912 FirmwareDraytek Vigor2620 FirmwareDraytek Vigorlte200 FirmwareDraytek Vigor2860 Firmware+19 | 27/2/2025 | 5/7/2026 | Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier; Vigor2135/2765/2766 4.4.5. and earlier; Vigor2865/2866/2927 4.4.5.3 and earlier; Vigor2962 4.3.2.8 and earlier; Vigor3912 4.3.6.1 and… | |
| Modificada | Alta (8.4) | 0.21% | — | Draytek Vigor165 FirmwareDraytek Vigor166 FirmwareDraytek Vigor2620 FirmwareDraytek Vigorlte200 Firmware+16 | 27/2/2025 | 5/7/2026 | An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3.2.7,… | |
| Modificada | Alta (8.8) | 0.65% | — | Draytek Vigor165 FirmwareDraytek Vigor166 FirmwareDraytek Vigor2620 FirmwareDraytek Vigorlte200 Firmware+16 | 27/2/2025 | 5/7/2026 | An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior… | |
| Modificada | Alta (7.5) | 0.45% | — | Draytek Vigor165 FirmwareDraytek Vigor166 FirmwareDraytek Vigor2620 FirmwareDraytek Vigorlte200 Firmware+16 | 27/2/2025 | 5/7/2026 | A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910… | |
| Modificada | Alta (8.8) | 0.38% | — | Draytek Vigor166 FirmwareDraytek Vigor2620 FirmwareDraytek Vigorlte200 FirmwareDraytek Vigor2860 Firmware+16 | 27/2/2025 | 5/7/2026 | Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigor 2865/2866/2927 prior to v4.4.5.3, Vigor 2962/3910 prior to v4.3.2.7, Vigor 3912… | |
| Analizada | Media (6.1) | 0.36% | — | Draytek Vigor2860 FirmwareDraytek Vigor2860n FirmwareDraytek Vigor2860n-plus FirmwareDraytek Vigor2860vn-plus Firmware+87 | 3/3/2023 | 17/6/2026 | Certain Draytek products are vulnerable to Cross Site Scripting (XSS) via the wlogin.cgi script and user_login.cgi script of the router's web application management portal. This affects Vigor3910, Vigor1000B, Vigor2962 v4.3.2.1; Vigor2865 and Vigor2866 v4.4.1.0; Vigor2927 v4.4.2.2; and Vigor2915, Vigor2765, Vigor2766,… | |
| Modificada | Crítica (9.8) | 34% | — | Draytek Vigor3910 FirmwareDraytek Vigor1000b FirmwareDraytek Vigor2962 FirmwareDraytek Vigor2962p Firmware+64 | 29/8/2022 | 17/6/2026 | An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field. |