DrayTek Weekly Updates 10 June 2026
Upcoming Webinar
Tuesday 16th June 2026,
12:00 noon EST
Duration: 30 minutes
Tune into our next YouTube Premiere webinar:
DrayTek
Threat Protection
This webinar introduces a new addition to the DrayTek
VigorShield lineup. which is an AI-enabled security platform called Threat
Protection. It represents a major step forward in safeguarding modern networks
without requiring endpoint agents or manual adjustments, providing threat
protection for all devices on a local network.
Topics covered include:
- VigorShield Family of Products
- Threat Protection Overview
- Threat Protection Key Capabilities
- Management & Visibility
- Use Cases
- Benefits & Business Outcomes
- DrayTek Security Solution Matrix
Then click “Notify me” to
receive a reminder when this event starts (the “Notify me” button appears when
you sign in to YouTube).
We hope to see you
there!
This video demonstrates how to set up an IPsec VPN tunnel between two
sites that use identical subnets on DrayTek routers, a common network
challenge. The core problem is that when two remote networks need to
communicate, both share the same IP address range, such as 192.168.1/24. Our
goal is to establish a stable and secure IPsec LAN-to-LAN VPN connection,
allowing hosts on both identical subnets to communicate successfully. A
standard VPN setup fails because routers cannot distinguish between their local
and remote networks, leading to conflicting routing entries and dropped
traffic.
Latest Knowledge Base Article
This knowledge base article covers troubleshooting tips for
an unexpected router reboot.
Latest Firmware
New Features
- Support VPN Matcher
- Add an IP overview for Teleworker VPN users
- Support VPN network translation for local
networks
- Add Destination WAN Interface selection for
Content Filter rules
- Add a user-defined-domain option for the Let's
Encrypt ACME client
- Support SWM MQTT (Message Queuing Telemetry
Transport) provisioning and management
Improvements
VPN & Remote Access
- Improve WireGuard IPv6 connection status
display
- Update OpenVPN configuration generation in
EasyVPN WUI
- Improve OpenVPN certificate validity and
expiration handling
For a complete list of improvements, refer
to the release notes in the download link below.
Click
here to download the firmware.
New Features
- Support VPN Matcher
- Add an IP overview for Teleworker VPN users
- Support VPN network translation for local
networks
- Add Destination WAN Interface selection for
Content Filter rules
- Add a user-defined-domain option for the Let's
Encrypt ACME client
- Support SWM MQTT (Message Queuing Telemetry
Transport) provisioning and management
Improvements
- Updated the WLAN driver with security
improvements (CVE-2026-20408, CVE-2026-20419, and CVE-2026-20430).
VPN
& Remote Access
- Improve WireGuard IPv6 connection status
display
- Update OpenVPN configuration generation in
EasyVPN WUI
- Improve OpenVPN certificate validity and
expiration handling
Click here to download the firmware.
Improvements
Improved:
Updated the WLAN driver with security improvements (CVE-2026-20452)
Click here to download the firmware.
New Features
- Support mDNS and IGMP across VLAN
- Support for using the alias IP for the Let's
Encrypt ACME service provider
- Support special characters (e.g., . - @) for
SNMPv3 agent username and password
- Support the option of Prefix Delegation in
Configuration>>LAN >>LANs for the DHCPv6 server
Improvements
- Improve the stability of the config converter
- Improve the display speed when opening or
refreshing Firewall IP Filters
- Remove the need for username/password in the
user-defined DDNS profile
- Fixed: Router restarted/crashed at random times
- Fixed: LAN IP Spoofing defence blocked its own
mesh packets and mDNS packets
Click
here to download the firmware.
Improvements
- Improve the VPN security
- Fixed: An issue with WUI pre-authentication
errors
VPN
- Enhance the L2TP and L2TP over IPsec
performance
- Enhance the protection for abnormal L2TP packet
parsing
- Fixed Abnormal OpenVPN TCP performance
For
a complete list of improvements, refer to the release notes in the download
link below:
Note:
Read the notes in the “Read First” section before installing the
firmware.
Click here to download the firmware.
Improvements
System Reboot
- Fixed: Router reboot caused by saving Syslog to
a USB disk and other unexpected reasons
VPN
- Fixed: Failure to establish the Teleworker VPN
IPsec IKEv2 PSK connection from iOS
- Fixed: VPN WireGuard 2FA pop-up did not show
when the firewall rules containing URL Filter/DNS Filter were active. Parsing
For a complete list of improvements, refer
to the release notes in the download link below:
Click
here to download the firmware.
Improvements
- Improve the VPN security
- Fixed: WUI pre-authentication errors
VPN
- Enhance the L2TP and L2TP over IPsec performance
- Enhance the protection for abnormal L2TP packet
parsing
- Fixed: Abnormal OpenVPN TCP performance
- Fixed: Default VPN Dial-out Server Type for VPN
LAN-to-LAN was IPsec IKEv2 instead of PPTP
For a complete list of improvements, refer
to the release notes in the download link below:
Click
here to download the firmware.
New Features
- Support VPN Matcher
- Add an IP overview for Teleworker VPN users
- Support VPN network translation for local
networks
- Add Destination WAN Interface selection for
Content Filter rules
- Add a user-defined-domain option for the Let's
Encrypt ACME client
- Support SWM MQTT (Message Queuing Telemetry
Transport) provisioning and management
Improvements
- Updated the WLAN driver with security
improvements (CVE-2026-20408, CVE-2026-20419, and CVE-2026-20430)
VPN & Remote Access
- Improve WireGuard IPv6 connection status
display
- Update OpenVPN configuration generation in
EasyVPN WUI
- Improve OpenVPN certificate validity and
expiration handling
For a complete list of improvements, refer
to the release notes in the download link below:
Click
here to download the firmware.
Improvements
- Improved: Improve the CGI security
Click here to download the firmware.
Improvements
- Improved: Improve the CGI security
Click
here to download the firmware.
Latest
Software
VigorACS 3 V3.8.2
New Features
- Add eSIM feature support
Improvements
- Improve the Wi-Fi Driver Security (CVE-2024-51127,CVE-2019-5484,CVE-2022-46364,CVE-2025-23368,CVE-2019-5413,
CVE-2018-3750, CVE-2015-8857, CVE-2020-28502, CVE-2016-10541, CVE-2020-28282, CVE-2021-31597,
CVE-2018-3739, and CVE-2020-7788)
- Improve the Web GUI Security (CVE-2026-4800)
- Improve the network security related to Apache
Artemis (CVE‑2026‑27446)
- Add a new install script for AlmaLinux
- Add a new FTP link for the file manager in
Maintenance >> File Manager
- Add the data sorting function to Provisioning
>> Firmware Upgrade Logs
- Fixed: Typo in standalone.xml file.
For a complete list of improvements, refer
to the release notes in the web page: https://fw.draytek.com.tw/ACS%203/Document/DrayTek_VigorACS%20V3.8.2_release-note.pdf
Support Model and Version
For
the full model support list, please refer to the Compatible Devices section in the
URL: https://www.draytek.com/products/vigoracs-3/
If
you wish to test the software, contact us at support@draytek.com.au for a
30-day trial.
Note: If
you are upgrading VigorACS 3 using OTA, it is recommended that you back up the
database before upgrading
What’s New
- Fixed: Smart VPN client encountered a crash when
using IKEv2 with MFA via TOTP
DrayTek HQ frequently sends
notifications about system updates, outages, security alerts, and firmware
releases.
To subscribe to our regular news updates, click “Subscribe”
on this page or log into your i-helpdesk account and enable the “Subscribe”
option.