CVE-2026-71907 DrayTek VigorAP Multiple Models OS Command Injection via setcamset

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulnerability is caused by insufficient filtering of the selectSlaves field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary...

CVE-2026-71907

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function, caused by insufficient filtering of the selectSlaves field before command execution. A remote attacker with valid administrative credentials for the device's web management interface can craft inp...

PT-2026-80941

Multiple DrayTek VigorAP models contain a command injection vulnerability in the setcamset function. The vulnerability is caused by insufficient filtering of the selectSlaves field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary...