CVE-2026-71910 | DrayTek VigorAP 903 Auto Test Command apautotest CMD0/CMD3/CMD6 command injection

A vulnerability described as very critical has been identified in DrayTek VigorAP 918R, VigorAP 960C, VigorAP 1060C, VigorAP 906, VigorAP 912C and VigorAP 903. The impacted element is the function apautotest of the component Auto Test Command Handler. Such manipulation of the argument CMD0/CMD3/CMD6 leads to command injection.

This vulnerability is uniquely identified as CVE-2026-71910. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More