Multiple Critical vulnerabilities in DrayTek Vigor products
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-71921, CVE-2026-71933, CVE-2026-71914, Summary: CVE-2026-71921 9.8 DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi CVE-2026-71933 9.1 DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions CVE-2026-71914 9.8 DrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray_apm See also: https://www.draytek…
CVSS 9.8 CVE-2026-71914 CVE-2026-71921 CVE-2026-71933 DrayTek FI