Threats Tagged 'cve-2026-71942'

Multiple vulnerabilities have been addressed in the DrayTek VigorSwitch product line by the Nationaal Cyber Security Centrum. These issues include a range of weaknesses such as command injection, null pointer dereference, path traversal, authorization bypass, and buffer overflow. The affected products include DrayTek VigorSwitch FX2120 and potentially other versions, though exact affected versions are not specified. No CVSS score is available for these vulnerabilities. There is no indication of known exploits in the wild. Patch or remediation details are not provided in the source data.

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mail_mailalert function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.