CVE-2026-71913 | DrayTek VigorAP CGI Interface upload_settings.cgi restorekey command injection

August 24, 2026 Yanac

A vulnerability classified as very critical has been found in DrayTek VigorAP. This affects an unknown function of the file upload_settings.cgi of the component CGI Interface. Performing a manipulation of the argument restorekey results in command injection.

This vulnerability was named CVE-2026-71913. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More