Threat Investigation
Request a demo

CVE-2026-71929

High

Description

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary commands with root privileges. Exploitation requires valid administrative credentials for the device's web management interface.

SeverityHigh
CVSS7.2
Exploit probability—
ProductVigorSwitch G2540xs
PublishedAug 24, 2026
First seenAug 24, 2026
Weakness typeCWE-78OS command injection

How to fix

Update
  • DrayTek Corporation VigorSwitch G2540xs3.9.10 or later
  • DrayTek Corporation VigorSwitch P2540xs3.9.10 or later
  • DrayTek Corporation VigorSwitch FX21203.9.10 or later
  • DrayTek Corporation VigorSwitch G2282x2.10.6 or later
  • DrayTek Corporation VigorSwitch P2282x2.10.6 or later
  • DrayTek Corporation VigorSwitch Q2300x2.10.7 or later
  • DrayTek Corporation VigorSwitch PQ2300xb2.10.7 or later
  • DrayTek Corporation VigorSwitch G2542x3.10.6 or later
  • DrayTek Corporation VigorSwitch P2542x3.10.6 or later
  • DrayTek Corporation VigorSwitch P2542xh3.10.6 or later
  • DrayTek Corporation VigorSwitch PX20602.9.10 or later
  • DrayTek Corporation VigorSwitch G12802.9.10 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
DrayTek Corporation VigorSwitch G2540xsv < 3.9.103.9.10
DrayTek Corporation VigorSwitch P2540xsv < 3.9.103.9.10
DrayTek Corporation VigorSwitch FX2120v < 3.9.103.9.10
DrayTek Corporation VigorSwitch G2282xv < 2.10.62.10.6
DrayTek Corporation VigorSwitch P2282xv < 2.10.62.10.6
DrayTek Corporation VigorSwitch Q2300xv < 2.10.72.10.7
DrayTek Corporation VigorSwitch PQ2300xbv < 2.10.72.10.7
DrayTek Corporation VigorSwitch G2542xv < 3.10.63.10.6
DrayTek Corporation VigorSwitch P2542xv < 3.10.63.10.6
DrayTek Corporation VigorSwitch P2542xhv < 3.10.63.10.6
DrayTek Corporation VigorSwitch PX2060v < 2.9.102.9.10
DrayTek Corporation VigorSwitch G1280v < 2.9.102.9.10
DrayTek Corporation VigorSwitch P1280v < 2.9.102.9.10
DrayTek Corporation VigorSwitch P1281xv < 2.9.102.9.10
DrayTek Corporation VigorSwitch G1282v < 2.9.102.9.10
DrayTek Corporation VigorSwitch P1282v < 2.9.102.9.10
DrayTek Corporation VigorSwitch G2121v < 2.9.102.9.10
DrayTek Corporation VigorSwitch P2121v < 2.9.102.9.10
DrayTek Corporation VigorSwitch PQ2121xv < 2.9.102.9.10
DrayTek Corporation VigorSwitch Q2121xv < 2.9.102.9.10
DrayTek Corporation VigorSwitch G2280xv < 2.9.102.9.10
DrayTek Corporation VigorSwitch P2280xv < 2.9.102.9.10
DrayTek Corporation VigorSwitch Q2200xv < 2.9.102.9.10
DrayTek Corporation VigorSwitch PQ2200xbv < 2.9.102.9.10
DrayTek Corporation VigorSwitch G2100v < 2.9.102.9.10
DrayTek Corporation VigorSwitch P2100v < 2.9.102.9.10
DrayTek Corporation VigorSwitch G2540xv < 2.9.102.9.10
DrayTek Corporation VigorSwitch P2540xv < 2.9.102.9.10

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.