https://patchfirst.co/vendor/draytek/New and newly exploited DrayTek CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-113391/CVE-2026-113391Tue, 20 Oct 2026 00:00:00 GMTDrayTek · Vigor2960. Not in CISA KEV. EPSS 2.1% (higher than 81.3% of CVEs). CVSS 9.9 CRITICAL. Priority 25.1 of 100.https://patchfirst.co/cve/CVE-2026-113390/CVE-2026-113390Tue, 20 Oct 2026 00:00:00 GMTDrayTek · Vigor2960. Not in CISA KEV. EPSS 1.9% (higher than 79.2% of CVEs). CVSS 9.9 CRITICAL. Priority 24.7 of 100.https://patchfirst.co/cve/CVE-2026-113389/CVE-2026-113389Tue, 20 Oct 2026 00:00:00 GMTDrayTek · Vigor2960. Not in CISA KEV. EPSS 1.9% (higher than 79.4% of CVEs). CVSS 9.9 CRITICAL. Priority 24.7 of 100.https://patchfirst.co/cve/CVE-2024-12987/CVE-2024-12987#kevThu, 15 May 2025 00:00:00 GMTDrayTek · Vigor Routers. In CISA KEV since 2025-05-15. ENISA EUVD lists it as exploited. EPSS 98.2% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2020-15415/CVE-2020-15415#kevMon, 30 Sep 2024 00:00:00 GMTDrayTek · Multiple Vigor Routers. In CISA KEV since 2024-09-30. ENISA EUVD lists it as exploited. EPSS 84.5% (higher than 99.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2021-20124/CVE-2021-20124#kevTue, 03 Sep 2024 00:00:00 GMTDrayTek · VigorConnect. In CISA KEV since 2024-09-03. ENISA EUVD lists it as exploited. EPSS 95.9% (higher than 99.87% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 68.2 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2021-20123/CVE-2021-20123#kevTue, 03 Sep 2024 00:00:00 GMTDrayTek · VigorConnect. In CISA KEV since 2024-09-03. ENISA EUVD lists it as exploited. EPSS 89.7% (higher than 99.79% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 68.2 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2020-8515/CVE-2020-8515#kevWed, 03 Nov 2021 00:00:00 GMTDrayTek · Multiple Vigor Routers. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1496 Resource Hijacking. Priority 69.9 of 100.kevpublic-exploitT1133T1059T1496