DrayTek Weekly Updates 12 October 2026
Latest Videos
Configuring Tag-Based VLANs on DrayTekNetworking Gear (DrayOS 4)
Click here
to watch this video.
Configuring Tag-Based VLANs on DrayTek NetworkingGear (DrayOS 5)
This video covers creating multiple LAN subnets with
tag-based VLANs across DrayTek DrayOS 5 routers and DrayTek VigorSwitches.
Click here to watch this video.
Latest Firmware
Improvements
· Strengthened Linux kernel security to mitigate CVE-2024-36971, CVE-2021-22600, CVE-2022-2586, CVE-2022-0492, CVE-2022-0185, CVE-2024-50302, CVE-2025-38352, CVE-2021-0920 and CVE-2020-0466.
· Enhanced security by addressing the privilege escalation issue in the GNU C Library known as "Looney Tunables" (CVE-2023-4911).
· Enhanced security by addressing an IPv6 AH (Authentication Header) vulnerability (CVE-2026-80844) and a PPPoE packet-handling vulnerability (CVE-2026-68121).
· Fixed: Teleworker VPN users assigned an IP address from a LAN subnet other than LAN1 did not receive the 2FA pop-up and were disconnected after the 2FA timeout.
Click here to download the firmware
Improvements
· Enhanced security by addressing the privilege escalation issue in the GNU C Library known as "Looney Tunables" (CVE-2023-4911).
· Enhanced security by addressing an IPv6 AH (Authentication Header) vulnerability (CVE-2026-80844) and a PPPoE packet-handling vulnerability (CVE-2026-68121).
· Fixed: Teleworker VPN users assigned an IP address from a LAN subnet other than LAN1 did not receive the 2FA pop-up and were disconnected after the 2FA timeout.
Click here to download the firmware
Improvement
Click here to download the firmware.
Improvements
· Enhanced the CGI security (CVE-2024-51139)
· Enhanced the Web GUI Security (CVE-2025-10547)
· Enhanced the WiFi Driver Security (CVE-2026-20633)
· Added TR-069 parameters for LTE Specify MCC/MNC
·
Use HTTPS instead of HTTP for DrayDDNS opcode
Update
For a complete list of improvements, refer to the release notes in the download link.
Click here to download the firmware.
Improvements
· Strengthened Linux kernel security to mitigate CVE-2024-36971, CVE-2024-1086, CVE-2021-22600, CVE-2022-2586, CVE-2022-0492, CVE-2022-0185, CVE-2024-50302, CVE-2025-38352, CVE-2021-0920, CVE-2026-68121, CVE-2026-74469, CVE-2026-80844, CVE-2026-81000, and CVE-2025-39964
· Fixed: Users were unable to log in to the WUI when MFA was enabled
· Fixed: WAN option in the WUI disappeared after a certain model upgrade
· Fixed: LAN DNS could not be received when Teleworker VPN via L2TP/IPsec was established
· Fixed: Error message “Error: 2021: Couldn't find the input column in config file. Could be config file broken.” appeared, which might be related to the security mechanism
Click
here to download the firmware.
Improvement
· Improved Web GUI Security
Click here to download the firmware.
Improvement
Fixed: Data Flow Monitor and VPN Connection Status did not work properly
Click here to download the firmware.
Improvements
· Strengthened Linux kernel security to mitigate CVE-2024-36971, CVE-2021-22600, CVE-2022-2586, CVE-2022-0492, CVE-2022-0185, CVE-2024-50302, CVE-2025-38352, CVE-2021-0920 and CVE-2020-0466
· Enhanced security by addressing the privilege escalation issue in the GNU C Library known as "Looney Tunables" (CVE-2023-4911)
· Enhanced security by addressing an IPv6 AH (Authentication Header) vulnerability (CVE-2026-80844) and a PPPoE packet-handling vulnerability (CVE-2026-68121)
·
Fixed: Teleworker VPN users assigned an IP
address from a LAN subnet other than LAN1 did not receive the 2FA pop-up and
were disconnected after the 2FA timeout.
Click here to download the firmware.
CalendarEvents from DrayTek HQ
DrayTek HQ frequently sends notifications about system updates, outages, security alerts, and firmware releases.
Click here for the latest news from DrayTek HQ.
To subscribe to our regular news updates, click “Subscribe” on this page or log into your i-helpdesk account and enable the “Subscribe” option.