CVE-2026-71908 | DrayTek VigorAP Mesh Speed Test mesh_start_speed_test meshdevice_index/meshdevice_ip command injection

A vulnerability labeled as very critical has been found in DrayTek VigorAP. Impacted is the function mesh_start_speed_test of the component Mesh Speed Test. The manipulation of the argument meshdevice_index/meshdevice_ip results in command injection.

This vulnerability is known as CVE-2026-71908. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More