# DrayTek security incidents · pwn.watch

> Security incidents tagged DrayTek (vendor, product, platform or attack type).

Page: https://pwn.watch/t/draytek · generated 2026-10-22T21:47:37.879Z

## Status (as of 2026-10-22)
- Incidents: 3 (0 live, 0 live and not fully patched, 3 patched)
- Days without a DrayTek security incident: 525
- Newest incident started: 2025-05-15

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/draytek.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/draytek/feed.xml
- This file: https://pwn.watch/t/draytek/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [DrayTek Vigor Routers: Vigor Routers OS Command Injection Vulnerability](https://pwn.watch/i/draytek-vigor-routers-cve-2024-12987) ([json](https://pwn.watch/i/draytek-vigor-routers-cve-2024-12987.json)): medium, closed, patched, started 2025-05-15, CVE-2024-12987
- [DrayTek Multiple Vigor Routers OS Command Injection](https://pwn.watch/i/draytek-multiple-vigor-routers-cve-2020-15415) ([json](https://pwn.watch/i/draytek-multiple-vigor-routers-cve-2020-15415.json)): critical, closed, patched, started 2024-09-30, CVE-2020-15415
- [DrayTek VigorConnect: 2 actively exploited vulnerabilities](https://pwn.watch/i/draytek-vigorconnect-cve-2021-20123-20124) ([json](https://pwn.watch/i/draytek-vigorconnect-cve-2021-20123-20124.json)): high, closed, patched, started 2024-09-03, CVE-2021-20123, CVE-2021-20124