CVE-2026-71927: DrayTek VigorSwitch Multiple Models OS Command Injection via rebDevice
Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary commands with root privileges. Exploitation requires valid administrative credentials for the device's web management interface.
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker must have valid administrative credentials for the device's web management interface. No user interaction is required once those credentials are available.
What access does successful exploitation provide?
Crafted username or password input to the affected function can lead to execution of arbitrary operating-system commands with root privileges.
Which input fields should be treated as the attack path?
The affected path involves insufficient filtering of the username and password fields before command execution in the rebDevice function.