DrayTek Weekly Updates 29 September 2026
Latest Knowledge Base Article
Someadditional info on the ACS 3 cloud accounts.
This article provides additional information on the recently launched VigorACS 3 cloud service.
Full details of this service are available on the product web page: https://www.draytek.com.au/products/network-management-tools/vigoracs-3-cloud/
Click here to read the article.
Latest Firmware
Improvements
· Enhance SQLite 3.9.2 security by applying patches to address multiple known security issues, including CVE-2018-20346, CVE-2018-20505, CVE-2018-20506, CVE-2018-8740, CVE-2019-16168, CVE-2019-19645, CVE-2019-19646, CVE-2019-8457, CVE-2020-11655, CVE-2020-11656, CVE-2020 13434, CVE-2020-13435, CVE-2020-13630, CVE-2020-13631, CVE-2020-13632, CVE-2020-15358, CVE-2022-35737, CVE-2023-7104, CVE-2025-3277, and CVE-2025-6965
· Fixed: Certain VoIP/SIP attacks could cause the router to reboot unexpectedly
· Fixed: The router could reboot unexpectedly under certain VoIP/SIP conditions
Click here to download the firmware.
Improvements
· Adjust the URL for connecting to MyVigor from auth.draytek.com to auth2.draytek.com
· Enhance the Web CGI security
· Improve the Wi-Fi Driver Security (CVE-2025-20674)
· Enhance Content Security Policy (CSP) security by using a randomly generated nonce
· Fixed: Router rebooted unexpectedly due to a VoIP attack
· Fixed: Router rebooted when importing config exp file
· Fixed: Changes to the admin username made via TR-069 took effect initially but were not retained after a reboot
· Fixed: Unexpected router reboots related to the IKE buffer, TR-069 DNS, IGMP Syslog, OpenSSL, customised DDNS, and wireless mesh node
Click
here to download the firmware.
· Support Threat Protection - Sentry, our new license-based cybersecurity solution
· Support Route-based VPN with manual remote-network routing without requiring 0.0.0.0/0 in the Routing Table
· Hardened the TR-069 configuration path by writing the ACS server URL and credentials directly to the configuration file, eliminating a command-injection risk in the web management backend
· Support NAT Port Forwarding on ports reserved by the router's own services, with conflict notification and forwarding priority options
· Add the exec sysuptime and exec wanstatus CLI commands, so system uptime and WAN status can be queried over SSH / Telnet
Improvements
· Update SQLCipher to 4.17.0 (CVE-2026-11822 / CVE-2026-11824)
· Fixed: The kernel SCTP ASCONF DEL-IP vulnerability "SCTPhantom" (CVE-2026-64564)
· Updated third-party packages based on CVE information identified during SBOM review, including curl/libcurl, ppp, miniupnpd, libarchive, libxml2, libexpat, jq, and libcap
· WAN profile application and WAN AutoHunt retries now reload only the affected interface, preventing other WAN connections from being dropped
For a detailed list of new features and improvements, refer to the release notes in the download link below:
Click here to download the firmware.
Improvements
· Enhance SQLite 3.9.2 security by applying patches to address multiple known security issues, including CVE-2018-20346, CVE-2018-20505, CVE-2018-20506, CVE-2018-8740, CVE-2019-16168, CVE-2019-19645, CVE-2019-19646, CVE-2019-8457, CVE-2020-11655, CVE-2020-11656, CVE-2020 13434, CVE-2020-13435, CVE-2020-13630, CVE-2020-13631, CVE-2020-13632, CVE-2020-15358, CVE-2022-35737, CVE-2023-7104, CVE-2025-3277, and CVE-2025-6965
· Fixed: Certain VoIP/SIP attacks could cause the router to reboot unexpectedly
· Fixed: The router could reboot unexpectedly under certain VoIP/SIP conditions
Click here to download the firmware.
Improvements
· Adjust the URL for connecting to MyVigor from auth.draytek.com to auth2.draytek.com
· Enhance the Web CGI security
· Improve the Wi-Fi Driver Security (CVE-2025-20674)
· Enhance Content Security Policy (CSP) security by using a randomly generated nonce
· Fixed: Router rebooted unexpectedly due to a VoIP attack
· Fixed: Router rebooted when importing config exp file
· Fixed: Changes to the admin username made via TR-069 took effect initially but were not retained after a reboot
· Fixed: Unexpected router reboots related to the IKE buffer, TR-069 DNS, IGMP Syslog, OpenSSL, customised DDNS, and wireless mesh node
Click here to download the firmware.
New Features
· Support Threat Protection - Sentry, our new license-based cybersecurity solution
· Support Route-based VPN with manual remote-network routing without requiring 0.0.0.0/0 in the Routing Table
· Hardened the TR-069 configuration path by writing the ACS server URL and credentials directly to the configuration file, eliminating a command-injection risk in the web management backend
· Support NAT Port Forwarding on ports reserved by the router's own services, with conflict notification and forwarding priority options
· Add the exec sysuptime and exec wanstatus CLI commands, so system uptime and WAN status can be queried over SSH / Telnet
Improvements
· Update SQLCipher to 4.17.0 (CVE-2026-11822 / CVE-2026-11824)
· Fixed: The kernel SCTP ASCONF DEL-IP vulnerability "SCTPhantom" (CVE-2026-64564)
· Updated third-party packages based on CVE information identified during SBOM review, including curl/libcurl, ppp, miniupnpd, libarchive, libxml2, libexpat, jq, and libcap
· WAN profile application and WAN AutoHunt retries now reload only the affected interface, preventing other WAN connections from being dropped
Click here to download the firmware.
Improvements
· Enhance SQLite 3.9.2 security by applying patches to address multiple known security issues, including CVE-2018-20346, CVE-2018-20505, CVE-2018-20506, CVE-2018-8740, CVE-2019-16168, CVE-2019-19645, CVE-2019-19646, CVE-2019-8457, CVE-2020-11655, CVE-2020-11656, CVE-2020 13434, CVE-2020-13435, CVE-2020-13630, CVE-2020-13631, CVE-2020-13632, CVE-2020-15358, CVE-2022-35737, CVE-2023-7104, CVE-2025-3277, and CVE-2025-6965
· Fixed: Certain VoIP/SIP attacks could cause the router to reboot unexpectedly
· Fixed: The router could reboot unexpectedly under certain VoIP/SIP conditions
Click here to download the firmware.
Improvements
· Enhance the Web CGI security
· Enhance the security by patching OpenSSL against the HollowByte DDoS attack
· Adjust the URL for connecting to MyVigor from auth.draytek.com to auth2.draytek.com
· Fixed: Intermittent reboot caused by VoIP SIP attack
· Fixed: Router rebooted when importing config exp file
· Fixed: Router rebooted constantly after LTE was configured
· Fixed: Unexpected system reboot occurred which might be related to L2TP
Click here to download the firmware.
Improvements
· Enhance the Web CGI security
· Enhance the security by patching OpenSSL against the HollowByte DDoS attack
· Adjust the URL for connecting to MyVigor from auth.draytek.com to auth2.draytek.com
· Fixed: Intermittent reboot caused by VoIP SIP attack
· Fixed: Router rebooted when importing config exp file
· Fixed: Router rebooted constantly after LTE was configured
· Fixed: Unexpected system reboot occurred which might be related to L2TP
Click here to download the firmware.
Improvements
· Enhance the Web CGI security
· Enhance security by patching OpenSSL against the HollowByte DDoS attack
· Adjust the URL for connecting to MyVigor from auth.draytek.com to auth2.draytek.com
Click here to download the firmware.
Improvements
· Fixed: System reboot due to memory exhaustion during VPN 2FA authentication when IP filters referenced Country Objects
Click here to download the firmware.
Improvements
System Reboot
· Fixed: Router reboot caused by saving Syslog to a USB disk and other unexpected reasons
VPN
· Fixed: Failure to establish Teleworker VPN IPsec IKEv2 PSK connection from iOS
· Fixed: VPN WireGuard 2FA pop-up did not show when the firewall rules containing URL Filter/DNS Filter were active
Security
· Fixed: Failed to clear ICMP sessions after the session timeout
· Fixed: Failed to select a keyword object with the type of domain name for the firewall
For a detailed list of new features and improvements, refer to the release notes in the download link below:
Click here to download the
firmware.
Improvements
Reboot / Crash / Freeze / High CPU
· Fixed: Router would reboot when an IKEv2 VPN negotiation was split into fragments
· Fixed: Router rebooted every 1–1.5 hours, potentially due to a memory leak in the network driver
· Fixed: Router crashed after a WireGuard key renewal
· Fixed: Router became unresponsive when a LAN host was flooded with traffic from the internet
· Fixed: Router rebooted due to the TR-069 connection to the management server
· Fixed: Router rebooted due to IGMP logging
For a detailed list of new features and improvements, refer to the release notes in the download link below:
Click here to download the
firmware.
Improvements
Reboot / Crash / Freeze / High CPU
· Fixed: Router would reboot when an IKEv2 VPN negotiation was split into fragments
· Fixed: Router rebooted every 1–1.5 hours, potentially due to a memory leak in the network driver
· Fixed: Router crashed after a WireGuard key renewal
· Fixed: Router became unresponsive when a LAN host was flooded with traffic from the internet
· Fixed: Router rebooted due to the TR-069 connection to the management server
· Fixed: Router rebooted due to IGMP logging
For a detailed list of new features and improvements, refer to the release notes in the download link below:
Click here to download the firmware.
New Features
· Support Threat Protection - Sentry, our new license-based cybersecurity solution
· Support Route-based VPN with manual remote-network routing without requiring 0.0.0.0/0 in the Routing Table
· Hardened the TR-069 configuration path by writing the ACS server URL and credentials directly to the configuration file, eliminating a command-injection risk in the web management backend
· Support NAT Port Forwarding on ports reserved by the router's own services, with conflict notification and forwarding priority options
· Add the exec sysuptime and exec wanstatus CLI commands, so system uptime and WAN status can be queried over SSH / Telnet
Improvements
· Update SQLCipher to 4.17.0 (CVE-2026-11822 / CVE-2026-11824)
· Fixed: The kernel SCTP ASCONF DEL-IP vulnerability "SCTPhantom" (CVE-2026-64564)
· Updated third-party packages based on CVE information identified during SBOM review, including curl/libcurl, ppp, miniupnpd, libarchive, libxml2, libexpat, jq, and libcap
· WAN profile application and WAN AutoHunt retries now reload only the affected interface, preventing other WAN connections from being dropped
For a detailed list of new features and improvements, refer to the release notes in the download link below:
Click here to download the firmware.
Latest Software
What’s New
· Fixed: App could not configure unconnected WAN with quick setup
· Fixed: App failed to display the correct LAN/WAN status of registered routers
· Fixed: The system crashed after displaying the error message “Failed to get status from router!” when connecting to certain CPE models (e.g. Vigor2928)
Click here to download.
What’s New
· Fixed: VigorAP 1070C could not register with the app, and the system displayed a “Network Failure” message
· Fixed: System crashes when opening Wireless APP>Diagnostic once after upgrading the mobile system to iOS 26.0
·
Fixed: The Register button was not displayed
under APP>Push Notification Setting when trying to register to AP1070C or
AP1063C with the app
Click here to download.
Calendar Events from DrayTek HQ
DrayTek HQ frequently sends notifications about system updates, outages, security alerts, and firmware releases.
Click here for the latest news from DrayTek HQ.
To subscribe to our regular news updates, click “Subscribe”
on this page or log into your i-helpdesk account and enable the “Subscribe”
option.