Threats Tagged 'cve-2026-71936'

Multiple vulnerabilities have been addressed in the DrayTek VigorSwitch product line by the Nationaal Cyber Security Centrum. These issues include a range of weaknesses such as command injection, null pointer dereference, path traversal, authorization bypass, and buffer overflow. The affected products include DrayTek VigorSwitch FX2120 and potentially other versions, though exact affected versions are not specified. No CVSS score is available for these vulnerabilities. There is no indication of known exploits in the wild. Patch or remediation details are not provided in the source data.

A buffer overflow vulnerability exists in the sysreboot function of DrayTek VigorSwitch G2540xs devices. This flaw arises from unsafe concatenation of input data into a fixed-size buffer. An attacker with valid administrative credentials to the device's web management interface can exploit this to cause denial of service or potentially execute arbitrary commands. The vulnerability has a high severity rating with a CVSS score of 8.6.