PT-2026-80948

Multiple DrayTek VigorAP models contain a command injection vulnerability in the dray apm component. The vulnerability is caused by insufficient validation of UDP message content after START SPEED TEST before command execution. A remote attacker can trigger this vulnerability via a crafted messag...