CVE-2026-71918 | DrayTek VigorSwitch webBackupAction option/key/pw_encode/pathN/valueN command injection

A vulnerability was found in DrayTek VigorSwitch and classified as very critical. This affects the function webBackupAction. Such manipulation of the argument option/key/pw_encode/pathN/valueN leads to command injection.

This vulnerability is listed as CVE-2026-71918. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More