CVE-2026-71924 | DrayTek VigorSwitch Command Execution getVid username/password command injection

August 24, 2026 Yanac

A vulnerability labeled as very critical has been found in DrayTek VigorSwitch. This affects the function getVid of the component Command Execution. Such manipulation of the argument username/password leads to command injection.

This vulnerability is traded as CVE-2026-71924. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More