CVE-2026-71921 | DrayTek VigorSwitch setget.cgi Interface pass command injection

A vulnerability was found in DrayTek VigorSwitch. It has been declared as very critical. This issue affects some unknown processing of the file setget.cgi of the component setget.cgi Interface. Executing a manipulation of the argument pass can lead to command injection.

This vulnerability is registered as CVE-2026-71921. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More