CVE-2026-71937

DrayTek VigorSwitch multiple models are affected by a buffer overflow in the poe_schedule_profile function. The root cause is repeated concatenation of scheduling fields (start_date, start_time, duration_time, how_often, weekdays, monthly_date, cycle_duration) into small fixed-size buffers withou...

CVE-2026-71935 DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can...

CVE-2026-71935

Multiple DrayTek VigorSwitch models are affected by a stack-based buffer overflow in the webBackupAction function. The root cause is repeated string concatenation of the pathN , valueN , key , and option fields into fixed-size stack buffers without total length checks. A remote attacker with vali...

CVE-2026-71935 DrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can...

EUVD-2026-64994

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the webBackupAction function. The vulnerability is caused by repeated string concatenation of the pathN, valueN, key, and option fields into fixed-size stack buffers without total length checks. A remote attacker can...

CVE-2026-71934

Multiple DrayTek VigorSwitch models are affected by a buffer overflow in the pingtrace function, caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker with valid administrative credentials for the device's web manage...

CVE-2026-71934 DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via...

CVE-2026-71934 DrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via...

EUVD-2026-64993

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via...

EUVD-2026-64989

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

EUVD-2026-64972

Multiple DrayTek VigorAP models contain a command injection vulnerability in the uploadsettings.cgi interface. The vulnerability is caused by insufficient filtering before the restorekey field is concatenated into a shell command. A remote attacker can trigger this vulnerability via crafted input...

CVE-2026-71912

Multiple DrayTek VigorAP models are affected by a buffer overflow in the apautotest function, caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker with valid administrative credentials on the device's web management interface can trigger the fl...

CVE-2026-71911 DrayTek VigorAP Multiple Models Buffer Overflow via setLan

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted...

EUVD-2026-64971

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...

EUVD-2026-64970

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the setLan function. The vulnerability is caused by missing length checks during memory copy operations involving the lanVlanId0, lanIp, and lanNetmask fields. A remote attacker can trigger this vulnerability via crafted...

CVE-2026-71912 DrayTek VigorAP Multiple Models Buffer Overflow via apautotest

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...

CVE-2026-71912 DrayTek VigorAP Multiple Models Buffer Overflow via apautotest

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...

CVE-2026-71911

Multiple DrayTek VigorAP models are affected by a buffer overflow in the setLan function, caused by missing length checks during memory copy operations on the lanVlanId0 , lanIp , and lanNetmask fields. A remote attacker with valid administrative credentials on the device's web management interfa...

CVE-2026-71908 DrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_test

Multiple DrayTek VigorAP models contain a command injection vulnerability in the meshstartspeedtest function. The vulnerability is caused by insufficient sanitization of the meshdeviceindex and meshdeviceip fields before command execution. A remote attacker can trigger this vulnerability via...

EUVD-2026-64965

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setLan function. The vulnerability is caused by insufficient validation of the lanIp and lanNetmask fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...