An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Draytek Vigor Routers | — | Upgrade DrayTek Vigor Router to the latest version | Oct 3, 2025 | Oct 2, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub