VDB

CVE-2026-71934

CVE-2026-71934 PUBLISHED CVSS 8.6 HIGH

Reported by VulnCheck · Published August 24, 2026

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.

Risk Scores

CVSS 4.0
8.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
DrayTek CorporationVigorSwitch G2540xs0
DrayTek CorporationVigorSwitch P2540xs0
DrayTek CorporationVigorSwitch FX21200
DrayTek CorporationVigorSwitch G2282x0
DrayTek CorporationVigorSwitch P2282x0
DrayTek CorporationVigorSwitch Q2300x0
DrayTek CorporationVigorSwitch PQ2300xb0
DrayTek CorporationVigorSwitch G2542x0
DrayTek CorporationVigorSwitch P2542x0
DrayTek CorporationVigorSwitch P2542xh0
DrayTek CorporationVigorSwitch PX20600
DrayTek CorporationVigorSwitch G12800
DrayTek CorporationVigorSwitch P12800
DrayTek CorporationVigorSwitch P1281x0
DrayTek CorporationVigorSwitch G12820
DrayTek CorporationVigorSwitch P12820
DrayTek CorporationVigorSwitch G21210
DrayTek CorporationVigorSwitch P21210
DrayTek CorporationVigorSwitch PQ2121x0
DrayTek CorporationVigorSwitch Q2121x0

…and 50 more

Timeline

  • Aug 24, 2026 Coalition ESS Score
  • Aug 24, 2026 CVE Published
  • Aug 25, 2026 EPSS Score
  • Aug 26, 2026 CVE Updated
  • Aug 27, 2026 EPSS Score
  • Aug 31, 2026 EPSS Score
  • Sep 3, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›