CVE-2026-71932: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in DrayTek Corporation VigorSwitch G2540xs

This vulnerability in DrayTek VigorSwitch G2540xs involves improper limitation of a pathname to a restricted directory in the getSyslogFile function. Due to insufficient validation of the option field, an attacker with administrative web interface credentials can supply crafted input containing path traversal sequences to read arbitrary files on the device. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low attack complexity, and required privileges. No vendor advisory or patch information is currently available.

An attacker with valid administrative credentials can exploit this vulnerability to read arbitrary files on the affected device. This could lead to unauthorized disclosure of sensitive information stored on the device. However, since administrative access is required, the impact is limited to scenarios where credentials are compromised or otherwise obtained.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, ensure that administrative credentials are strongly protected and access to the device's web management interface is restricted to trusted users and networks.