CVE-2026-71912: DrayTek VigorAP Multiple Models Buffer Overflow via apautotest
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of service or potentially executing arbitrary commands. Exploitation requires valid administrative credentials for the device's web management interface.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
DrayTek VigorAP devices whose web management interface is reachable by an attacker are exposed, but exploitation requires valid administrative credentials. Devices with administrative access restricted to trusted management networks have a smaller exposure surface than devices managed from untrusted networks.
What does an attacker need to exploit the vulnerability?
An attacker needs valid administrator credentials for the device web management interface and must submit crafted input in the CMD6 field processed by the apautotest function. No user interaction is required once the attacker has that access.
What is the potential impact of successful exploitation?
Successful exploitation can cause a denial of service and may allow arbitrary command execution. The reported severity vector indicates high potential impact to confidentiality, integrity, and availability.