Threats Tagged 'cve-2026-71933'

Multiple vulnerabilities have been addressed in the DrayTek VigorSwitch product line by the Nationaal Cyber Security Centrum. These issues include a range of weaknesses such as command injection, null pointer dereference, path traversal, authorization bypass, and buffer overflow. The affected products include DrayTek VigorSwitch FX2120 and potentially other versions, though exact affected versions are not specified. No CVSS score is available for these vulnerabilities. There is no indication of known exploits in the wild. Patch or remediation details are not provided in the source data.

DrayTek VigorSwitch G2540xs contains multiple unauthorized operation vulnerabilities due to missing authorization checks in syslog functions. A remote attacker can exploit these flaws to modify device configuration, restart services, save startup configuration, or clear logs without authentication. The vulnerability has a high severity score of 8.8 CVSS 4.0. No patch or official remediation guidance is currently available.