CVE-2026-71916

DrayTek VigorSwitch Multiple Models OS Command Injection via commandTable

State: Published
Severity: 8.6 High
Published: Aug 24, 2026
Updated: Aug 27, 2026
Reserved: Aug 8, 2026

Description

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the commandTable function. The vulnerability is caused by incomplete filtering of dangerous characters such as backticks, newline characters, and single quotes in the parameter field. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary commands with root privileges. Exploitation requires valid administrative credentials for the device's web management interface.

Scores

CVSS	Score	Vector	Source
4.0	8.6 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	VulnCheck
3.1	7.2 High	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	VulnCheck

Weaknesses

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

Product	Versions
VigorSwitch G2540xsDrayTek Corporation	before 3.9.10Affected
VigorSwitch P2540xsDrayTek Corporation	before 3.9.10Affected
VigorSwitch FX2120DrayTek Corporation	before 3.9.10Affected
VigorSwitch G2282xDrayTek Corporation	before 2.10.6Affected
VigorSwitch P2282xDrayTek Corporation	before 2.10.6Affected
VigorSwitch Q2300xDrayTek Corporation	before 2.10.7Affected
VigorSwitch PQ2300xbDrayTek Corporation	before 2.10.7Affected
VigorSwitch G2542xDrayTek Corporation	before 3.10.6Affected
VigorSwitch P2542xDrayTek Corporation	before 3.10.6Affected
VigorSwitch P2542xhDrayTek Corporation	before 3.10.6Affected
VigorSwitch PX2060DrayTek Corporation	before 2.9.10Affected
VigorSwitch G1280DrayTek Corporation	before 2.9.10Affected
VigorSwitch P1280DrayTek Corporation	before 2.9.10Affected
VigorSwitch P1281xDrayTek Corporation	before 2.9.10Affected
VigorSwitch G1282DrayTek Corporation	before 2.9.10Affected
VigorSwitch P1282DrayTek Corporation	before 2.9.10Affected
VigorSwitch G2121DrayTek Corporation	before 2.9.10Affected
VigorSwitch P2121DrayTek Corporation	before 2.9.10Affected
VigorSwitch PQ2121xDrayTek Corporation	before 2.9.10Affected
VigorSwitch Q2121xDrayTek Corporation	before 2.9.10Affected
VigorSwitch G2280xDrayTek Corporation	before 2.9.10Affected
VigorSwitch P2280xDrayTek Corporation	before 2.9.10Affected
VigorSwitch Q2200xDrayTek Corporation	before 2.9.10Affected
VigorSwitch PQ2200xbDrayTek Corporation	before 2.9.10Affected
VigorSwitch G2100DrayTek Corporation	before 2.9.10Affected
VigorSwitch P2100DrayTek Corporation	before 2.9.10Affected
VigorSwitch G2540xDrayTek Corporation	before 2.9.10Affected
VigorSwitch P2540xDrayTek Corporation	before 2.9.10Affected

References

https://www.draytek.com/about/security-advisory/multiple-vulnerabilities-in-vigorswitch-series-august-2026/vendor-advisory
VulnCheck Advisory: DrayTek VigorSwitch Multiple Models OS Command Injection via commandTablethird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.