Critical severity9.8NVD Advisory· Published Mar 26, 2020· Updated Jun 17, 2026

CVE-2020-10826

Description

/cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injection via a remote HTTP request in DEBUG mode.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Draytek/Vigor2960 Firmware
cpe:2.3:o:draytek:vigor2960_firmware:*:*:*:*:*:*:*:*
Range: <1.5.1
Draytek/Vigor300b Firmware
cpe:2.3:o:draytek:vigor300b_firmware:*:*:*:*:*:*:*:*
Range: <1.5.1
Draytek/Vigor3900 Firmware
cpe:2.3:o:draytek:vigor3900_firmware:*:*:*:*:*:*:*:*
Range: <1.5.1
Draytek/Vigor3900description
Draytek/Vigor 300Bllm-fuzzy
Range: <1.5.1
Draytek/Vigor2962llm-fuzzy
Range: <1.5.1
Draytek/Vigor3900llm-fuzzy
Range: <1.5.1

Patches

Vulnerability mechanics

References

slashd.ga/2020/03/draytek-vulnerabilities/nvdExploitThird Party Advisory
www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-stack-based-buffer-overflow-vulnerability/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.032
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000