CVE-2026-71916

Multiple DrayTek VigorSwitch models are affected by an OS command injection vulnerability in the commandTable function. The root cause is incomplete filtering of dangerous characters—specifically backticks, newline characters, and single quotes—within the parameter field, allowing a remote attack...