CVE-2026-71925

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

CVE-2026-71925

Multiple DrayTek VigorSwitch models are affected by an OS command injection vulnerability in the getDetail function . The root cause is insufficient filtering of the username and password fields before they are passed to command execution. A remote attacker with valid administrative credentials f...

EUVD-2026-64984

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

CVE-2026-71925 DrayTek VigorSwitch Multiple Models OS Command Injection via getDetail

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

CVE-2026-71925 DrayTek VigorSwitch Multiple Models OS Command Injection via getDetail

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the getDetail function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

PT-2026-80959

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description A command injection issue exists in the getDetail function. The flaw stems from insufficient filtering of the username and password fields before they are used in command executio...