DrayTek warns Vigor routers may have serious security flaws - here's what we know

Security padlock and circuit board to protect data.

• DrayTek patches CVE-2025-10547, a firmware flaw enabling crashes or remote code execution
• Vulnerability affects routers with exposed WebUI or misconfigured ACLs; local access also exploitable
• Vigor routers are common in SMBs, making them attractive targets for persistent cyberattacks

Network gear manufacturer DrayTek has patched a dangerous vulnerability found in dozens of Vigor business router models, and is urging users to apply the fix as soon as possible.