CVE-2026-71932: DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile
Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to access arbitrary files on the device. Exploitation requires valid administrative credentials for the device's web management interface.
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Devices in the affected DrayTek VigorSwitch model set are exposed if their web management interface is reachable by an attacker who has valid administrative credentials.
What does an attacker need to exploit it?
An attacker needs valid administrator credentials for the device web management interface. They can then submit crafted path traversal sequences in the option field used by getSyslogFile.
What could successful exploitation allow?
Successful exploitation can allow access to arbitrary files on the device. The provided severity vector indicates confidentiality impact, with no stated integrity or availability impact.