DrayTek Vigor2960 End of Life: Firmware Fixes End December 9, 2026
The DrayTek Vigor2960 reaches the end of firmware maintenance on December 9, 2026. Its two siblings are already there: the Vigor3900 reached end of life on March 9, 2026 and the Vigor300B on April 22, 2026. The dates follow from DrayTek's product lifecycle page, which gives each model an end-of-sale day and a firmware maintenance period counted from it, five years for these three.
The three routers and their dates
| Model | DrayTek status | End of sale | Firmware maintained for | End of life |
|---|---|---|---|---|
| Vigor2960 | End of Sale | December 9, 2021 | 5 years | December 9, 2026 |
| Vigor300B | End of Life | April 22, 2021 | 5 years | April 22, 2026 |
| Vigor3900 | End of Life | March 9, 2021 | 5 years | March 9, 2026 |
DrayTek's page prints the end-of-sale day and the maintenance duration, and calculates the End of Life day from them. The status column is DrayTek's wording on the day of publication.
How DrayTek's lifecycle works
DrayTek's page gives every product a status of Available, End of Sale or End of Life. A product moves to End of Sale on its last order day. Firmware maintenance then continues for a fixed period, three years or five years depending on the model, and when that period runs out the product is End of Life. DrayTek's own advice on the page is to replace End of Life models, and it notes that a model missing from its current line-up is likely to have outdated hardware and firmware.
Other DrayTek models reaching end of life soon
| Model | End of sale | End of life |
|---|---|---|
| VigorAP 802 | November 1, 2023 | November 1, 2026 |
| VigorAP 920R Series | November 1, 2023 | November 1, 2026 |
| Vigor2926 Series | April 1, 2022 | April 1, 2027 |
| Vigor2952 | April 1, 2022 | April 1, 2027 |
| Vigor3220 | April 1, 2022 | April 1, 2027 |
Every DrayTek model on the lifecycle page is on our DrayTek Vigor page, regenerated from DrayTek's table.
What to do
- On a Vigor3900 or Vigor300B: past end of life. Plan the replacement now. DrayTek's current models in the same class are listed as Available on its lifecycle page.
- On a Vigor2960: install the latest firmware DrayTek has published, and set the replacement date before December 9, 2026, not after it.
- On any of the three, today: make sure the web management interface is not reachable from the internet. Every one of the exploited flaws was in that interface. Restrict management to the internal network or a VPN, and turn off remote management if it is not needed.
- Check what else is at the edge. Routers, firewalls and VPN gateways past end of support are the subject of CISA's guidance on end-of-support edge devices; our edge device list tracks the dates across vendors.
Frequently Asked Questions
When is the DrayTek Vigor2960 end of life?
DrayTek's product lifecycle page lists the Vigor2960 as End of Sale since December 9, 2021, with firmware maintained for five years after that day. That puts the end of firmware maintenance, DrayTek's End of Life, at December 9, 2026.
Are the Vigor3900 and Vigor300B still supported?
No. DrayTek's lifecycle page lists both as End of Life. The Vigor3900 reached the end of firmware maintenance on March 9, 2026 and the Vigor300B on April 22, 2026.
How long does DrayTek maintain firmware after a product is discontinued?
DrayTek's lifecycle page gives each product an end-of-sale day and a firmware maintenance duration counted from it. For the models on the page the duration is three years or five years, and the End of Life day is the end-of-sale day plus that duration.
Why does end of life matter for these DrayTek routers in particular?
Because they have been attacked repeatedly. CISA's Known Exploited Vulnerabilities catalog has three entries that name the Vigor2960, Vigor3900 and Vigor300B together, all remote command execution flaws in the web management interface. DrayTek issued firmware fixes for them while the routers were in maintenance. After end of life, a new flaw of the same kind will not get one.
Related
- DrayTek Vigor — every model and its status
- End-of-support edge devices
- D-Link end-of-life routers on the exploited list
- Exploited and Unpatchable