CVE-2026-71917: DrayTek VigorSwitch Multiple Models OS Command Injection via pingtrace
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the pingtrace function. The vulnerability is caused by insufficient validation of the host field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary commands with root privileges. Exploitation requires valid administrative credentials for the device's web management interface.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be able to reach the VigorSwitch web management interface and authenticate with valid administrative credentials. Exploitation does not require user interaction.
What level of access can successful exploitation provide?
A successful attacker can execute arbitrary operating-system commands with root privileges on the affected device. This can affect confidentiality, integrity, and availability.
What input path is involved?
The issue is triggered through crafted input in the host field used by the pingtrace function. The host value is insufficiently validated before it is used in command execution.