Draytek Vigor routers vulnerable to RCE through EasyVPN interface
This is the page you're already on — the Human View toggle above shows it in full.
A green key on the record, left, is one Decision Insights added. It doesn't exist on the company's site or in a wire feed. The same key labels its row on the right, so you can match them directly. More on how DI enriches a record.
This is what the machine sees: the exact JSON-LD an agent receives for this listing.
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/#website",
"@type": "WebSite",
"name": "Decision Insights",
"potentialAction": {
"@type": "SearchAction",
"target": {
"@type": "EntryPoint",
"urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}\u0026submit=1"
}
},
"publisher": {
"@id": "https://decisioninsights.ai/#organization"
},
"url": "https://decisioninsights.ai"
}
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/#organization",
"@type": "Organization",
"contactPoint": {
"@type": "ContactPoint",
"contactType": "customer support",
"email": "[email protected]"
},
"description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
"logo": {
"@type": "ImageObject",
"url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
},
"name": "Decision Insights",
"parentOrganization": {
"@type": "Organization",
"name": "Wiretap Labs",
"sameAs": [
"https://www.linkedin.com/company/wiretap-labs",
"https://www.crunchbase.com/organization/wiretap-labs"
],
"url": "https://wiretaplabs.com"
},
"publishingPrinciples": "https://decisioninsights.ai/standards/",
"sameAs": [
"https://www.linkedin.com/company/decisioninsights"
],
"url": "https://decisioninsights.ai"
}
{
"@context": "https://schema.org",
"@type": "BreadcrumbList",
"itemListElement": [
{
"@type": "ListItem",
"item": "https://decisioninsights.ai",
"name": "Decision Insights",
"position": 1
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/records/",
"name": "Records",
"position": 2
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/draytek-vigor-routers-vulnerable-to-rce-through-easyvpn-interface/",
"name": "Draytek Vigor routers vulnerable to RCE through EasyVPN interface",
"position": 3
}
]
}
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/draytek-vigor-routers-vulnerable-to-rce-through-easyvpn-interface/#blogposting",
"@type": "BlogPosting",
"about": {
"@type": "Organization",
"name": "DrayTek"
},
"articleSection": [
"Cybersecurity",
"Data Center",
"Network Operator"
],
"audience": [
{
"@type": "Audience",
"additionalType": "Persona",
"audienceType": "Security Operations Leader"
},
{
"@type": "Audience",
"additionalType": "Adoption curve",
"audienceType": "Laggards"
}
],
"author": {
"@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
"@type": "Person",
"name": "Decision Insights Threat Desk",
"url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
},
"dateModified": "2026-08-23T13:20:04-06:00",
"datePublished": "2025-11-18T19:23:59-07:00",
"description": "Vigor routers by Draytek face a RCE vulnerability via EasyVPN and LAN interface. Users advised to install the latest patches.",
"headline": "Draytek Vigor routers vulnerable to RCE through EasyVPN interface",
"isBasedOn": {
"@type": "CreativeWork",
"author": {
"@type": "Person",
"name": "Ayushi Kriplani"
},
"sourceOrganization": {
"@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
"name": "Department of Homeland Security"
},
"url": "https://kb.cert.org/vuls/id/294418"
},
"keywords": [
"Common Vulnerabilities and Exposures",
"Intrusion Detection System",
"Local Area Network",
"Router",
"Virtual Private Network",
"Vulnerabilities",
"Wide Area Network"
],
"mainEntityOfPage": {
"@id": "https://decisioninsights.ai/draytek-vigor-routers-vulnerable-to-rce-through-easyvpn-interface/",
"@type": "WebPage",
"sdDatePublished": "2026-08-23",
"sdPublisher": {
"@id": "https://decisioninsights.ai/#organization"
}
},
"publisher": {
"@id": "https://decisioninsights.ai/#organization"
}
}
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
"@type": "Person",
"description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards \u0026 Methodology.",
"name": "Decision Insights Threat Desk",
"sameAs": [
"https://www.linkedin.com/showcase/decisioninsights/"
],
"url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
}
Audience targeting
A company states its own audience in marketing copy, if at all. This is Decision Insights' own classification of the content -- seniority, job function, buyer role, adoption curve, technology maturity and target industry -- not the publisher's self-reported audience.
Subject determination
A syndication feed carries a story and every company it happens to name, with no way to tell which one the story is actually about. This is Decision Insights' own determination of this article's subject -- one company, resolved from the source feed's own assignment where one exists, our own analysis otherwise.
Primary source
Our own summary carries our own byline, same as anyone else's would. This is the original work it is based on -- the source URL, its author and its publisher -- so the claim can be checked against where it actually came from, not just taken on our word.