CVE-2026-71919

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Aug 24, 2026
Source updated: Aug 24, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

DrayTek VigorSwitch Multiple Models OS Command Injection via sysreboot

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the sysreboot function. The vulnerability is caused by insufficient filtering of the config, act, pathN, and valueN fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary commands with root privileges. Exploitation requires valid administrative credentials for the device's web management interface.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

VigorSwitch G2540xs

Vendor: DrayTek Corporation
Product: VigorSwitch G2540xs
Platforms: Unknown
Default status: unaffected

VigorSwitch G2540xs · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.9.10	Unavailable	None listed

VigorSwitch P2540xs

Vendor: DrayTek Corporation
Product: VigorSwitch P2540xs
Platforms: Unknown
Default status: unaffected

VigorSwitch P2540xs · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.9.10	Unavailable	None listed

VigorSwitch FX2120

Vendor: DrayTek Corporation
Product: VigorSwitch FX2120
Platforms: Unknown
Default status: unaffected

VigorSwitch FX2120 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.9.10	Unavailable	None listed

VigorSwitch G2282x

Vendor: DrayTek Corporation
Product: VigorSwitch G2282x
Platforms: Unknown
Default status: unaffected

VigorSwitch G2282x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.10.6	Unavailable	None listed

VigorSwitch P2282x

Vendor: DrayTek Corporation
Product: VigorSwitch P2282x
Platforms: Unknown
Default status: unaffected

VigorSwitch P2282x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.10.6	Unavailable	None listed

VigorSwitch Q2300x

Vendor: DrayTek Corporation
Product: VigorSwitch Q2300x
Platforms: Unknown
Default status: unaffected

VigorSwitch Q2300x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.10.7	Unavailable	None listed

VigorSwitch PQ2300xb

Vendor: DrayTek Corporation
Product: VigorSwitch PQ2300xb
Platforms: Unknown
Default status: unaffected

VigorSwitch PQ2300xb · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.10.7	Unavailable	None listed

VigorSwitch G2542x

Vendor: DrayTek Corporation
Product: VigorSwitch G2542x
Platforms: Unknown
Default status: unaffected

VigorSwitch G2542x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.10.6	Unavailable	None listed

VigorSwitch P2542x

Vendor: DrayTek Corporation
Product: VigorSwitch P2542x
Platforms: Unknown
Default status: unaffected

VigorSwitch P2542x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.10.6	Unavailable	None listed

VigorSwitch P2542xh

Vendor: DrayTek Corporation
Product: VigorSwitch P2542xh
Platforms: Unknown
Default status: unaffected

VigorSwitch P2542xh · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.10.6	Unavailable	None listed

VigorSwitch PX2060

Vendor: DrayTek Corporation
Product: VigorSwitch PX2060
Platforms: Unknown
Default status: unaffected

VigorSwitch PX2060 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G1280

Vendor: DrayTek Corporation
Product: VigorSwitch G1280
Platforms: Unknown
Default status: unaffected

VigorSwitch G1280 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P1280

Vendor: DrayTek Corporation
Product: VigorSwitch P1280
Platforms: Unknown
Default status: unaffected

VigorSwitch P1280 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P1281x

Vendor: DrayTek Corporation
Product: VigorSwitch P1281x
Platforms: Unknown
Default status: unaffected

VigorSwitch P1281x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G1282

Vendor: DrayTek Corporation
Product: VigorSwitch G1282
Platforms: Unknown
Default status: unaffected

VigorSwitch G1282 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P1282

Vendor: DrayTek Corporation
Product: VigorSwitch P1282
Platforms: Unknown
Default status: unaffected

VigorSwitch P1282 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G2121

Vendor: DrayTek Corporation
Product: VigorSwitch G2121
Platforms: Unknown
Default status: unaffected

VigorSwitch G2121 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P2121

Vendor: DrayTek Corporation
Product: VigorSwitch P2121
Platforms: Unknown
Default status: unaffected

VigorSwitch P2121 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch PQ2121x

Vendor: DrayTek Corporation
Product: VigorSwitch PQ2121x
Platforms: Unknown
Default status: unaffected

VigorSwitch PQ2121x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch Q2121x

Vendor: DrayTek Corporation
Product: VigorSwitch Q2121x
Platforms: Unknown
Default status: unaffected

VigorSwitch Q2121x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G2280x

Vendor: DrayTek Corporation
Product: VigorSwitch G2280x
Platforms: Unknown
Default status: unaffected

VigorSwitch G2280x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P2280x

Vendor: DrayTek Corporation
Product: VigorSwitch P2280x
Platforms: Unknown
Default status: unaffected

VigorSwitch P2280x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch Q2200x

Vendor: DrayTek Corporation
Product: VigorSwitch Q2200x
Platforms: Unknown
Default status: unaffected

VigorSwitch Q2200x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch PQ2200xb

Vendor: DrayTek Corporation
Product: VigorSwitch PQ2200xb
Platforms: Unknown
Default status: unaffected

VigorSwitch PQ2200xb · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G2100

Vendor: DrayTek Corporation
Product: VigorSwitch G2100
Platforms: Unknown
Default status: unaffected

VigorSwitch G2100 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P2100

Vendor: DrayTek Corporation
Product: VigorSwitch P2100
Platforms: Unknown
Default status: unaffected

VigorSwitch P2100 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G2540x

Vendor: DrayTek Corporation
Product: VigorSwitch G2540x
Platforms: Unknown
Default status: unaffected

VigorSwitch G2540x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P2540x

Vendor: DrayTek Corporation
Product: VigorSwitch P2540x
Platforms: Unknown
Default status: unaffected

VigorSwitch P2540x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed