CVE-2026-71938

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Aug 24, 2026
Source updated: Aug 26, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

DrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrp

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the switch_lan_gvrp function. The vulnerability is caused by unsafe copying of the portList field into an undersized buffer. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

VigorSwitch G2540xs

Vendor: DrayTek Corporation
Product: VigorSwitch G2540xs
Platforms: Unknown
Default status: unaffected

VigorSwitch G2540xs · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.9.10	Unavailable	None listed

VigorSwitch P2540xs

Vendor: DrayTek Corporation
Product: VigorSwitch P2540xs
Platforms: Unknown
Default status: unaffected

VigorSwitch P2540xs · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.9.10	Unavailable	None listed

VigorSwitch FX2120

Vendor: DrayTek Corporation
Product: VigorSwitch FX2120
Platforms: Unknown
Default status: unaffected

VigorSwitch FX2120 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.9.10	Unavailable	None listed

VigorSwitch G2282x

Vendor: DrayTek Corporation
Product: VigorSwitch G2282x
Platforms: Unknown
Default status: unaffected

VigorSwitch G2282x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.10.6	Unavailable	None listed

VigorSwitch P2282x

Vendor: DrayTek Corporation
Product: VigorSwitch P2282x
Platforms: Unknown
Default status: unaffected

VigorSwitch P2282x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.10.6	Unavailable	None listed

VigorSwitch Q2300x

Vendor: DrayTek Corporation
Product: VigorSwitch Q2300x
Platforms: Unknown
Default status: unaffected

VigorSwitch Q2300x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.10.7	Unavailable	None listed

VigorSwitch PQ2300xb

Vendor: DrayTek Corporation
Product: VigorSwitch PQ2300xb
Platforms: Unknown
Default status: unaffected

VigorSwitch PQ2300xb · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.10.7	Unavailable	None listed

VigorSwitch G2542x

Vendor: DrayTek Corporation
Product: VigorSwitch G2542x
Platforms: Unknown
Default status: unaffected

VigorSwitch G2542x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.10.6	Unavailable	None listed

VigorSwitch P2542x

Vendor: DrayTek Corporation
Product: VigorSwitch P2542x
Platforms: Unknown
Default status: unaffected

VigorSwitch P2542x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.10.6	Unavailable	None listed

VigorSwitch P2542xh

Vendor: DrayTek Corporation
Product: VigorSwitch P2542xh
Platforms: Unknown
Default status: unaffected

VigorSwitch P2542xh · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	3.10.6	Unavailable	None listed

VigorSwitch PX2060

Vendor: DrayTek Corporation
Product: VigorSwitch PX2060
Platforms: Unknown
Default status: unaffected

VigorSwitch PX2060 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G1280

Vendor: DrayTek Corporation
Product: VigorSwitch G1280
Platforms: Unknown
Default status: unaffected

VigorSwitch G1280 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P1280

Vendor: DrayTek Corporation
Product: VigorSwitch P1280
Platforms: Unknown
Default status: unaffected

VigorSwitch P1280 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P1281x

Vendor: DrayTek Corporation
Product: VigorSwitch P1281x
Platforms: Unknown
Default status: unaffected

VigorSwitch P1281x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G1282

Vendor: DrayTek Corporation
Product: VigorSwitch G1282
Platforms: Unknown
Default status: unaffected

VigorSwitch G1282 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P1282

Vendor: DrayTek Corporation
Product: VigorSwitch P1282
Platforms: Unknown
Default status: unaffected

VigorSwitch P1282 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G2121

Vendor: DrayTek Corporation
Product: VigorSwitch G2121
Platforms: Unknown
Default status: unaffected

VigorSwitch G2121 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P2121

Vendor: DrayTek Corporation
Product: VigorSwitch P2121
Platforms: Unknown
Default status: unaffected

VigorSwitch P2121 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch PQ2121x

Vendor: DrayTek Corporation
Product: VigorSwitch PQ2121x
Platforms: Unknown
Default status: unaffected

VigorSwitch PQ2121x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch Q2121x

Vendor: DrayTek Corporation
Product: VigorSwitch Q2121x
Platforms: Unknown
Default status: unaffected

VigorSwitch Q2121x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G2280x

Vendor: DrayTek Corporation
Product: VigorSwitch G2280x
Platforms: Unknown
Default status: unaffected

VigorSwitch G2280x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P2280x

Vendor: DrayTek Corporation
Product: VigorSwitch P2280x
Platforms: Unknown
Default status: unaffected

VigorSwitch P2280x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch Q2200x

Vendor: DrayTek Corporation
Product: VigorSwitch Q2200x
Platforms: Unknown
Default status: unaffected

VigorSwitch Q2200x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch PQ2200xb

Vendor: DrayTek Corporation
Product: VigorSwitch PQ2200xb
Platforms: Unknown
Default status: unaffected

VigorSwitch PQ2200xb · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G2100

Vendor: DrayTek Corporation
Product: VigorSwitch G2100
Platforms: Unknown
Default status: unaffected

VigorSwitch G2100 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P2100

Vendor: DrayTek Corporation
Product: VigorSwitch P2100
Platforms: Unknown
Default status: unaffected

VigorSwitch P2100 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch G2540x

Vendor: DrayTek Corporation
Product: VigorSwitch G2540x
Platforms: Unknown
Default status: unaffected

VigorSwitch G2540x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed

VigorSwitch P2540x

Vendor: DrayTek Corporation
Product: VigorSwitch P2540x
Platforms: Unknown
Default status: unaffected

VigorSwitch P2540x · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	2.9.10	Unavailable	None listed