Reinforcement Coordination Engine

A remote code execution vulnerability was found in Vigor routers by Draytek, allowing attackers to inject commands via HTTP requests.

Draytek reports a remote code execution vulnerability in Vigor routers' EasyVPN and LAN web interface, enabling command injection.

CISA added several new vulnerabilities to its KEV Catalog, focusing on active exploitation concerns.

An attacker can leverage a vulnerability in Vigor routers to gain control by sending crafted HTTP requests through the LAN interface.

CISA advises administrators to enhance security measures in response to Fortinet's advisory on exploited vulnerabilities.