EUVD-2026-65002

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

CVE-2026-71943 DrayTek VigorSwitch Multiple Models OS Command Injection via setDevNet

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevNet function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

PT-2026-80977

Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description Multiple models contain a flaw in the setDevNet function where insufficient filtering of the username and password fields allows for command injection. A remote attacker with vali...