# Router security incidents · pwn.watch

> Security incidents tagged Router (vendor, product, platform or attack type).

Page: https://pwn.watch/t/router · generated 2026-10-22T19:58:23.236Z

## Status (as of 2026-10-22)
- Incidents: 5 (0 live, 0 live and not fully patched, 2 patched)
- Days without a Router security incident: 752
- Newest incident started: 2024-09-30

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/router.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/router/feed.xml
- This file: https://pwn.watch/t/router/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [D-Link DIR-820 Router OS Command Injection](https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280) ([json](https://pwn.watch/i/d-link-dir-820-router-cve-2023-25280.json)): critical, closed, unpatched, started 2024-09-30, CVE-2023-25280
- [DrayTek Multiple Vigor Routers OS Command Injection](https://pwn.watch/i/draytek-multiple-vigor-routers-cve-2020-15415) ([json](https://pwn.watch/i/draytek-multiple-vigor-routers-cve-2020-15415.json)): critical, closed, patched, started 2024-09-30, CVE-2020-15415
- [DrayTek VigorConnect: 2 actively exploited vulnerabilities](https://pwn.watch/i/draytek-vigorconnect-cve-2021-20123-20124) ([json](https://pwn.watch/i/draytek-vigorconnect-cve-2021-20123-20124.json)): high, closed, patched, started 2024-09-03, CVE-2021-20123, CVE-2021-20124
- [D-Link DIR-600 Router Cross-Site Request Forgery (CSRF)](https://pwn.watch/i/d-link-dir-600-router-cve-2014-100005) ([json](https://pwn.watch/i/d-link-dir-600-router-cve-2014-100005.json)): high, closed, unpatched, started 2024-05-16, CVE-2014-100005
- [D-Link DIR-605 Router Information Disclosure](https://pwn.watch/i/d-link-dir-605-router-cve-2021-40655) ([json](https://pwn.watch/i/d-link-dir-605-router-cve-2021-40655.json)): high, closed, unpatched, started 2024-05-16, CVE-2021-40655