CVE-2021-20129: DrayTek VigorConnect

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs.

Affected products

• DrayTek VigorConnect: version 1.6.0 only

Published 2021-10-13. Last modified 2026-06-17.